Analysis
-
max time kernel
141s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
12/07/2024, 13:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3d8e593d46df849c094eda6161d7f527_JaffaCakes118.exe
Resource
win7-20240704-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
3d8e593d46df849c094eda6161d7f527_JaffaCakes118.exe
Resource
win10v2004-20240709-en
3 signatures
150 seconds
General
-
Target
3d8e593d46df849c094eda6161d7f527_JaffaCakes118.exe
-
Size
742KB
-
MD5
3d8e593d46df849c094eda6161d7f527
-
SHA1
559946a34b2cd1b2f5faab10d825f8799bdaeb73
-
SHA256
6a70caed1cb53cf96776b515d2157f1fd828d8d6b17f7de08c1f97bf354daa40
-
SHA512
f41a1dd60a5d8fb0a8859b22491118a52a9456c409ca5d12933df4ffb7431d77264aecd12e2ac456b040b1e7fc9ad6d6d71a0feb436924ae6a2412af052120df
-
SSDEEP
12288:h+RFIW+H7LRxk6ZVzCEmR9+LLwlG9N450EbJ7x6Iag:haWLRxk6fkMLLM64x66
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1705699165-553239100-4129523827-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost = "C:\\WINDOWS\\System32\\svchost.exe" 3d8e593d46df849c094eda6161d7f527_JaffaCakes118.exe -
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\WINDOWS\SysWOW64\svchost.exe 3d8e593d46df849c094eda6161d7f527_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5012 3d8e593d46df849c094eda6161d7f527_JaffaCakes118.exe