Analysis
-
max time kernel
94s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
08/07/2024, 17:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2d384dcc552f87a1dec9477343f537a6_JaffaCakes118.exe
Resource
win7-20240708-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2d384dcc552f87a1dec9477343f537a6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
2 signatures
150 seconds
General
-
Target
2d384dcc552f87a1dec9477343f537a6_JaffaCakes118.exe
-
Size
195KB
-
MD5
2d384dcc552f87a1dec9477343f537a6
-
SHA1
473370deab54bc6320eada886d8a18a5bfe5b007
-
SHA256
4df8c3d45384bb43861e9ca359da33d557fa526bd81067edd9c4ac5f1f065678
-
SHA512
67dde1558cac79c22000bc88790e7804f41c07dbcf159aecbd1766d2b2940df6b2dddef2562d908a79faf655526bf324f762c6b7098e60fe51b68c8c0f9ce42e
-
SSDEEP
3072:FskHZ1rPcXZMA9sOliLqWYgEAQIIOraBIpPQMPo+Pzrc77OWw8x8ca:FsoXrZA9sFiAdraBCDoAc769/ca
Score
1/10
Malware Config
Signatures
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.key 2d384dcc552f87a1dec9477343f537a6_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile" 2d384dcc552f87a1dec9477343f537a6_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4640 2d384dcc552f87a1dec9477343f537a6_JaffaCakes118.exe