a80310bf0bce64fb09511f52574b02d8ed481eb6cecabc631adbb4f53177bb79

Analysis

max time kernel
50s
max time network
19s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
08/07/2024, 09:01

Target

2bbe6fa437d11572ca50bf25b2e973c6_JaffaCakes118.exe
Size

1.3MB
MD5

2bbe6fa437d11572ca50bf25b2e973c6
SHA1

26f802be148556932e1757ac80621b44de2afcb8
SHA256

a80310bf0bce64fb09511f52574b02d8ed481eb6cecabc631adbb4f53177bb79
SHA512

70bfe45037fd4fe85c1aa53fe2211cc5150e61d28d3381f269d6c536988704415a0518ff683575cc96c4eed5438f72d1d292e72d5b0b414a7a47975d9f5a97aa
SSDEEP

24576:p3aPug7hvJhklEzwd97yFO/qi/NXNfGCjSLmwsNPd3RgMJBV1Ls2wBPU:YuuhvJCCzwdxyFO/jNd+CjS7sNlKMJBU

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2472	2bbe6fa437d11572ca50bf25b2e973c6_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\2bbe6fa437d11572ca50bf25b2e973c6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2bbe6fa437d11572ca50bf25b2e973c6_JaffaCakes118.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2472

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x540
1⤵
PID:2168