Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
08/07/2024, 05:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2b16a8ac261c90dfe8dce05026e5e338_JaffaCakes118.exe
Resource
win7-20240220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2b16a8ac261c90dfe8dce05026e5e338_JaffaCakes118.exe
Resource
win10v2004-20240704-en
3 signatures
150 seconds
General
-
Target
2b16a8ac261c90dfe8dce05026e5e338_JaffaCakes118.exe
-
Size
44KB
-
MD5
2b16a8ac261c90dfe8dce05026e5e338
-
SHA1
13a2182e265038952a2cf35fb6a34d0e905c39a7
-
SHA256
e922aa730ca04d22aa6ea4dce3dbb9138d63c033e9da6b85976332eca80aac99
-
SHA512
d4636d588544f84c7869985b2c92ef15f2b736ab6ba581d32deb7b0a4da15f70720685fe3ae0eec1e78be2e98837c4faff269c2f45496fbcea65d287cc61596e
-
SSDEEP
384:WKlaCgFT/OEWFxaCghugwJuF6ZmGlA9jJSGu9231gL3bQE+kNLRKfBr:8FtW2XhCJo60Gy1J5lgL3b/+kNdKfB
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2192 2b16a8ac261c90dfe8dce05026e5e338_JaffaCakes118.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2192 2b16a8ac261c90dfe8dce05026e5e338_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2192 2b16a8ac261c90dfe8dce05026e5e338_JaffaCakes118.exe 2192 2b16a8ac261c90dfe8dce05026e5e338_JaffaCakes118.exe 2192 2b16a8ac261c90dfe8dce05026e5e338_JaffaCakes118.exe