Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
06-07-2024 11:14
General
-
Target
28596ea4e0d64b65a646485dfc920ca6_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
28596ea4e0d64b65a646485dfc920ca6
-
SHA1
27b01fb5fe4649f1ced4dad14e3bb65cabbe8cec
-
SHA256
9b627b373f7ce1ff6660eaf45d1f21c6852c34b368d9dbd3b2254d98bf0d712a
-
SHA512
abcd81c734555697431fdc83cbe79801610f867b61ed2bd01a50c528809e94e78d3401ef9eb0e935b3e6caae20c2960068386775b13bf1e2ba3a19109a7a494e
-
SSDEEP
3072:45bnHY0rtY3KdP2xtu4kTGzSxjrkn836wfgISUTZ4sWlQwCzCqhXoBBrpyeJcDUd:47OZduZnAHO15
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\28596ea4e0d64b65a646485dfc920ca6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\28596ea4e0d64b65a646485dfc920ca6_JaffaCakes118.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory