Overview
overview
7Static
static
33040448d6b...18.exe
windows7-x64
73040448d6b...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3mame32.chm
windows7-x64
1mame32.chm
windows10-2004-x64
1mame32FXpo.exe
windows7-x64
1mame32FXpo.exe
windows10-2004-x64
1mame32FXpp.exe
windows7-x64
1mame32FXpp.exe
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
09/07/2024, 11:48
Static task
static1
Behavioral task
behavioral1
Sample
3040448d6bf700d8a6c913552ae3a705_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3040448d6bf700d8a6c913552ae3a705_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
mame32.chm
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
mame32.chm
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
mame32FXpo.exe
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
mame32FXpo.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
mame32FXpp.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
mame32FXpp.exe
Resource
win10v2004-20240704-en
General
-
Target
mame32FXpo.exe
-
Size
2.4MB
-
MD5
1191f917110b70ac7cd49e366de6e679
-
SHA1
3efb6dd6bad206d35762ab7475193ca175e79caa
-
SHA256
0aa0032ee70bfae71a1633d004a0518efb004a94a90307ed3e15033087a5a997
-
SHA512
2c56e2c1257620c454ce50e05dd22dc2ea44dba06bd8354f3381d0e56f739f7c9fd3199f862e150f96979473c45dde5e1e63848a6fcec4a3824e83ea51dc048a
-
SSDEEP
24576:9AOITrkGIz36Q2sbIfi71i2HNtvjexqmTEC5Nn6b6cQiSH5REzwD813MzcmHby7h:9VwrkVLbL1frdCYR7SbHYmHG5CW
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3484 mame32FXpo.exe 3484 mame32FXpo.exe