Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
06-07-2024 07:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
27b673242b7aa3cd95375172a4be9c70_JaffaCakes118.exe
Resource
win7-20240705-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
27b673242b7aa3cd95375172a4be9c70_JaffaCakes118.exe
Resource
win10v2004-20240704-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
27b673242b7aa3cd95375172a4be9c70_JaffaCakes118.exe
-
Size
2.8MB
-
MD5
27b673242b7aa3cd95375172a4be9c70
-
SHA1
a18610edc193ec306623b6e5b715c62f9fd5681b
-
SHA256
43ca366abd77d7676c6700887ad07fd2a6dc7aafcdba710bc7d78b7568816c4f
-
SHA512
71fa3344fff7ebc0a1c0cfaae4ac194d07345c54d2448ad26f41ad485ac0a5e332646143b74ed1ec8c582eca40a97c736ebed5d71c4dc2ca443340d05ab34faf
-
SSDEEP
49152:Vnu2UVQ27oB6vjls6BME288W5Y16xzEbGeeAASSjZK2cLYB8W5mxUjY+1QBeB/QG:Vu2QsGxs6kgibGXAMJiSm7SWeB/QV3lG
Score
8/10
Malware Config
Signatures
-
Drops file in Drivers directory 1 IoCs
description ioc Process File opened for modification C:\Windows\system32\drivers\etc\hosts 27b673242b7aa3cd95375172a4be9c70_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 2408 27b673242b7aa3cd95375172a4be9c70_JaffaCakes118.exe 2408 27b673242b7aa3cd95375172a4be9c70_JaffaCakes118.exe 2408 27b673242b7aa3cd95375172a4be9c70_JaffaCakes118.exe 2408 27b673242b7aa3cd95375172a4be9c70_JaffaCakes118.exe 2408 27b673242b7aa3cd95375172a4be9c70_JaffaCakes118.exe