Analysis
-
max time kernel
140s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
12-07-2024 01:19
Behavioral task
behavioral1
Sample
3b784d3adabf1c94b9fc2ebc47474bc0_JaffaCakes118.exe
Resource
win7-20240705-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
3b784d3adabf1c94b9fc2ebc47474bc0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
3b784d3adabf1c94b9fc2ebc47474bc0_JaffaCakes118.exe
-
Size
451KB
-
MD5
3b784d3adabf1c94b9fc2ebc47474bc0
-
SHA1
337c4e2b505172497f931b433fd83644b4fc6d3f
-
SHA256
82c8f0bcf7a8cff2f9a70a0a7d69b4cd45bb2f7336258836601f4efd14642b0e
-
SHA512
7954c824a584f11672278406c35527f89807036683feb9fcd31c3f49d0ed00ef559d4fba357977d71715b875f422968ea0f5dea8b582d2ab6a107bbdbeb9f16c
-
SSDEEP
12288:B2nlNKg8eSc31meqxsxytOEicQ2VkniYhEqfZFNT:BglkJc31mPsxytkJdnjCqfZFR
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1304-0-0x0000000000400000-0x00000000004FC000-memory.dmp upx behavioral1/memory/1304-1-0x0000000000400000-0x00000000004FC000-memory.dmp upx -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1304 3b784d3adabf1c94b9fc2ebc47474bc0_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1304 3b784d3adabf1c94b9fc2ebc47474bc0_JaffaCakes118.exe 1304 3b784d3adabf1c94b9fc2ebc47474bc0_JaffaCakes118.exe