Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
06/07/2024, 23:08
Static task
static1
Behavioral task
behavioral1
Sample
298a4a478c7fbfac25058dc8b49cc27d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
298a4a478c7fbfac25058dc8b49cc27d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
298a4a478c7fbfac25058dc8b49cc27d_JaffaCakes118.exe
-
Size
646KB
-
MD5
298a4a478c7fbfac25058dc8b49cc27d
-
SHA1
3878e1a815e69a2678840cfb83fea47c3b789386
-
SHA256
386fd9756bc2d8f60102925bbb282b71643422708125b45a686d4cefbf4532b6
-
SHA512
0ead75d9201260db4438f453e51ac4706cc3ff40d9f10e3cd4b797f17453b65a0f31c4fb497cd46a6fae694c28ab45df12a00663d769710a2427214386c0e580
-
SSDEEP
12288:PXdh2Tl6shTzy1lbC7JY0IM6ax80s8kx4IEqsDSeUESn0pC6:PXf2h6sJzy1lb8JY0iaS0s8k6zqsDSev
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3980 298a4a478c7fbfac25058dc8b49cc27d_JaffaCakes118.exe 3980 298a4a478c7fbfac25058dc8b49cc27d_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3980 298a4a478c7fbfac25058dc8b49cc27d_JaffaCakes118.exe 3980 298a4a478c7fbfac25058dc8b49cc27d_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
593B
MD55c2cd20c7d43c691e7a7a721484fc21b
SHA1a021e4cde3e22d9c18847d882ae30b9e35837fcf
SHA256e4f531b8cbd10b879c5ced2be26425a59d450fbc03b75c2873312fcb252c4263
SHA51224abcbbbb23496bca44f7c297ae00bf13bacfd11cf9526d15d625ae59d7b6fccce58d6852621e96620dec25f629e3e048a610b9f6adbff8e82418342513bdae7