3102bde090f4e2a53e712750ac3d8cd3ecff2ad16cd821f197680070d71b6f43 | Triage

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
08-07-2024 19:20

Sharing

Report Analysis Logs

General

Target

2d85d223c1ff9bcca1af0a099149d073_JaffaCakes118.exe
Size

262KB
MD5

2d85d223c1ff9bcca1af0a099149d073
SHA1

c0c8bceffd6ca8297e35753ef3931cd4e19d63f4
SHA256

3102bde090f4e2a53e712750ac3d8cd3ecff2ad16cd821f197680070d71b6f43
SHA512

6e63e294031a801546981286a11431e3c6f588ba61e2e852fdb669ec483de248e6231bb3650869bc5684058c24595570e8d6745ce265c016fad60229003bbcf1
SSDEEP

3072:6BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBb:0

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2520	2d85d223c1ff9bcca1af0a099149d073_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\2d85d223c1ff9bcca1af0a099149d073_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2d85d223c1ff9bcca1af0a099149d073_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2520-0-0x0000000000400000-0x0000000000407000-memory.dmp

Filesize
28KB

Download
memory/2520-1-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2520-5-0x0000000000400000-0x0000000000407000-memory.dmp

Filesize
28KB

Download