Analysis
-
max time kernel
93s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
10/07/2024, 12:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
34b37a7d5d0f8823ce1fedb428f486d1_JaffaCakes118.exe
Resource
win7-20240704-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
34b37a7d5d0f8823ce1fedb428f486d1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
-
Target
34b37a7d5d0f8823ce1fedb428f486d1_JaffaCakes118.exe
-
Size
81KB
-
MD5
34b37a7d5d0f8823ce1fedb428f486d1
-
SHA1
9b6c8ef283b61bb28bed79ed262a93f31467e0d0
-
SHA256
766185fb7dd35220eebd69ddf4f38dd7c1ab1e0fbe73ba91589be2929424a6ee
-
SHA512
c258bda3a2ace9281b06812217f88e19569cec9c5480d5f0e396a05ee6b63f93e561089fb8d867018fcbf6417046be25cd7184bc3c6ca5412bfe54c66e3d2d5b
-
SSDEEP
1536:0XkiyNCLRrs3voYsoYnTNoi0v0U0TQmO6gShVkugPwhYBdDvc:edsx+TazaTQ40pLDE
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
description pid Process PID 2312 set thread context of 0 2312 34b37a7d5d0f8823ce1fedb428f486d1_JaffaCakes118.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 2312 34b37a7d5d0f8823ce1fedb428f486d1_JaffaCakes118.exe