Analysis
-
max time kernel
92s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
09-07-2024 04:27
Behavioral task
behavioral1
Sample
2efe67ce4be9bc1cc60ac2be9a0a63b4_JaffaCakes118.exe
Resource
win7-20240705-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2efe67ce4be9bc1cc60ac2be9a0a63b4_JaffaCakes118.exe
Resource
win10v2004-20240704-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
2efe67ce4be9bc1cc60ac2be9a0a63b4_JaffaCakes118.exe
-
Size
56KB
-
MD5
2efe67ce4be9bc1cc60ac2be9a0a63b4
-
SHA1
f40cf6d25a0e7b7c5bb6abb568e01d272913caa4
-
SHA256
ed61d3996ddd7817fb287dbe86206ed9fb58b327f84fb8338dd69b3b4398b3b4
-
SHA512
5e6609808c9f5121d3508dbee24073da28d950970d6a9d6bbf35f4e7bbfedf6efa9189109ff628aa1013646f86bd6e491264b17247cf3a0527f043e0bd7303f8
-
SSDEEP
768:Kfh0nsH/RYRPHI1wLBuu91FuuCf8YP8LBwoxYI7qxmTyjJSsqNZ3:UBfR2PjVN7qxmTyjJK
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/856-0-0x0000000000400000-0x000000000040F000-memory.dmp upx behavioral2/memory/856-3-0x0000000000400000-0x000000000040F000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 856 2efe67ce4be9bc1cc60ac2be9a0a63b4_JaffaCakes118.exe 856 2efe67ce4be9bc1cc60ac2be9a0a63b4_JaffaCakes118.exe 856 2efe67ce4be9bc1cc60ac2be9a0a63b4_JaffaCakes118.exe