aa6930cee98456f5c989e915acfe140337f4c1b02741cee8add755f112fe96fa

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
08/07/2024, 03:11

Target

2ac84bc1cb1ea4382f5abb15d200a510_JaffaCakes118.exe
Size

100KB
MD5

2ac84bc1cb1ea4382f5abb15d200a510
SHA1

5223e0f7bde2bb34f9c39d6fce8ace9a52e94605
SHA256

aa6930cee98456f5c989e915acfe140337f4c1b02741cee8add755f112fe96fa
SHA512

97362b85822fc6c093ca914d7fe7e2cb24ce606d0639a2cd0854bbadab6af352498b17777d492a6aafd00e1fcb5dc7b2df3ca844789ee468736743d5ae6fecfe
SSDEEP

1536:vsGeD9bxsoSK11o4PkMdIxi5suDupEEVoz:kGe34K11o4PkGKYkKUo

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
2144	2ac84bc1cb1ea4382f5abb15d200a510_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\2ac84bc1cb1ea4382f5abb15d200a510_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2ac84bc1cb1ea4382f5abb15d200a510_JaffaCakes118.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2144