Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
13/07/2024, 07:02 UTC
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
40a8284c6320e707b20cb93ac8a33e42_JaffaCakes118.exe
Resource
win7-20240704-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
40a8284c6320e707b20cb93ac8a33e42_JaffaCakes118.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
General
-
Target
40a8284c6320e707b20cb93ac8a33e42_JaffaCakes118.exe
-
Size
268KB
-
MD5
40a8284c6320e707b20cb93ac8a33e42
-
SHA1
b9d075d318a206db90eac9a96c00db8b982f7500
-
SHA256
3f6cfb65fb0af2a8fcabf3c3c5aba6113a517045e3b14267b1c63aee56cb92ab
-
SHA512
b1296a15913b43a4e542770ee921a9a27b1506f9c502200138a3cb4aa80137a0d82a2d8d67273859c60c14889938a3bd149a6e154d2037f587bf93105f1637c5
-
SSDEEP
1536:s7qHyTbRtxjjmfsXGxH3gP1QT16ED8N23bqvG1gRr0HJN6rVsXlzZ1ApnAV5Vzv8:s+mbVjjAHUG8Nqn1NpJro
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1848 40a8284c6320e707b20cb93ac8a33e42_JaffaCakes118.exe 1848 40a8284c6320e707b20cb93ac8a33e42_JaffaCakes118.exe 1848 40a8284c6320e707b20cb93ac8a33e42_JaffaCakes118.exe
Processes
Network
-
Remote address:8.8.8.8:53Request2.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Request73.144.22.2.in-addr.arpaIN PTRResponse73.144.22.2.in-addr.arpaIN PTRa2-22-144-73deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request55.36.223.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request103.169.127.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request15.164.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request92.12.20.2.in-addr.arpaIN PTRResponse92.12.20.2.in-addr.arpaIN PTRa2-20-12-92deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request30.243.111.52.in-addr.arpaIN PTRResponse
No results found
-
66 B 90 B 1 1
DNS Request
8.8.8.8.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
2.159.190.20.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
73.144.22.2.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
55.36.223.20.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
103.169.127.40.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
15.164.165.52.in-addr.arpa
-
69 B 131 B 1 1
DNS Request
92.12.20.2.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.210.232.199.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
30.243.111.52.in-addr.arpa