Analysis

  • max time kernel
    141s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-07-2024 21:13

General

  • Target

    36673af5cf13d53988accd589c010833_JaffaCakes118.exe

  • Size

    839KB

  • MD5

    36673af5cf13d53988accd589c010833

  • SHA1

    4ec5f5ad99e928195188dda228fec2eeb86cab13

  • SHA256

    e33f08f379f1273fcee5aa42e4cce008d7e9f93b4ee6632be19dedf966216852

  • SHA512

    e300e42f7e43f284e65e90180cda000a7049a0158eb6c6f964f7a150dfcf0a9187d673700c21b03763320502229302dc4df4a0f4ffd4749ff3107b04526d0d55

  • SSDEEP

    12288:GB2C/Re7ibRsgE0fm/7JDbyByOSLBMliIK8uiE9NCHO8098HmCLiQ/6FB4:GB9EcsgE0KdDu8dq/U9NCHl68HrJ

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\36673af5cf13d53988accd589c010833_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\36673af5cf13d53988accd589c010833_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2964-0-0x0000000002280000-0x0000000002281000-memory.dmp

    Filesize

    4KB

  • memory/2964-1-0x00000000022A0000-0x00000000022A1000-memory.dmp

    Filesize

    4KB

  • memory/2964-2-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

  • memory/2964-4-0x0000000002280000-0x0000000002281000-memory.dmp

    Filesize

    4KB