cb8d0f6478d288c0d24408fb5a000d693b7fa0145827ee039739b45aac3c0b77

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
10-07-2024 21:08

Target

36638169c03da4bef7f781465e89b87c_JaffaCakes118.exe
Size

244KB
MD5

36638169c03da4bef7f781465e89b87c
SHA1

84a6c16396a02c3d53504bf5e5c4ef193a1daa32
SHA256

cb8d0f6478d288c0d24408fb5a000d693b7fa0145827ee039739b45aac3c0b77
SHA512

02bf76a37c8e597da51f27c544e685a409cb98a2bb2c1e71e0f75c54da067da585b4e8d6b52dd437b63685744ec94ffb92fccff2ee86e456c8d3c6825ebee359
SSDEEP

3072:+MCK7zhZdMOMIu6B8en72gVGKxGemx5Pg63gDNswsknxcfqU/fgDlHOb7REPgKTD:XP7zhMIV2gVtDmxFghCkwqMPb7REP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

36638169c03da4bef7f781465e89b87c_JaffaCakes118.exe

pid process

2080 36638169c03da4bef7f781465e89b87c_JaffaCakes118.exe
2080 36638169c03da4bef7f781465e89b87c_JaffaCakes118.exe

pid	process
2080	36638169c03da4bef7f781465e89b87c_JaffaCakes118.exe
2080	36638169c03da4bef7f781465e89b87c_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\36638169c03da4bef7f781465e89b87c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\36638169c03da4bef7f781465e89b87c_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2080