Analysis
-
max time kernel
94s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
10/07/2024, 09:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
341d67781231c7995126c8cea8b89984_JaffaCakes118.exe
Resource
win7-20240708-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
341d67781231c7995126c8cea8b89984_JaffaCakes118.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
General
-
Target
341d67781231c7995126c8cea8b89984_JaffaCakes118.exe
-
Size
26KB
-
MD5
341d67781231c7995126c8cea8b89984
-
SHA1
8c737b312ef5798fcf5cee305dd209e6b5196a93
-
SHA256
9117ac2a07e8b67c82411a681945a90804063650422387ebd01d9509aef43069
-
SHA512
5e9df21fb915e1b976473e25e99c49b527fd22c6eed8e129774582db86b8707349852099e7194cf6cb548e98d96a28592b56be49ffc32be4d838b41457aaf159
-
SSDEEP
384:lgg7eNCBhO4OYBNekYzn3oPBZVTeSZiTmzuof1+1RW3xM41DLyzEVJ:lgieeh/RNekYT3oPBZVJ4T66wqk24
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3120 341d67781231c7995126c8cea8b89984_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\341d67781231c7995126c8cea8b89984_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\341d67781231c7995126c8cea8b89984_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:3120
-
C:\Windows\System32\Upfc.exeC:\Windows\System32\Upfc.exe /launchtype periodic /cv otRFjjzAF0CHz0fsmhVdCw.01⤵PID:4476