Analysis
-
max time kernel
92s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
13/07/2024, 08:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe
-
Size
88KB
-
MD5
40dd839a4e0795effee738b6bfa45ab9
-
SHA1
bd1f9d23535fdd51e722a5a02fa16f4eee6e3002
-
SHA256
49341abc07e84cba4b73068a91fdd3d9c513802f8382a8fecb1aaf5125c20d5e
-
SHA512
4090aa07325abd0e18de526a5d2eea47fce617721c4e94a5b2b82e7793b2aa20ee0258c652bccb80628a2a959316e495cbe2350b3fd2d1a3ded91aef2a1eb7b7
-
SSDEEP
1536:V3doZK/nc3IqkhEvTIL16hPXibs7PvuH4:VNoAncwqTIK6cPi
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 40 IoCs
pid Process 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3680 40dd839a4e0795effee738b6bfa45ab9_JaffaCakes118.exe