Analysis
-
max time kernel
149s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
14/07/2024, 10:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe
Resource
win7-20240705-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe
-
Size
549KB
-
MD5
456f8ce39234edf5234650532b8004aa
-
SHA1
4db1eff8b704d439bc06a348b707d3dfa86e15e0
-
SHA256
da2e679b3e9113d736e85298168eef56d4d11eb562075182005b41c403a45ee8
-
SHA512
73b890bbd6d7d90036447a2cf59e20e97a92e26293ff8a44fc40f007478839aafbd10348151202bcce0e1bfd4cccd8f239ae42501cd1c6aa25e7334a4d21f521
-
SSDEEP
12288:JEAvnWWj6J5Cm1xHoxG1/cWAd99yaZ5biZZsHhCQ:GAP6HCm12G1fABHZ5WZZmC
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe -
Suspicious use of SendNotifyMessage 64 IoCs
pid Process 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe 2440 456f8ce39234edf5234650532b8004aa_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD585ac923f0c15dcc5c6b9947153e64bcd
SHA129ed6d0c35283b0eb55c6f68f574b3f041871a27
SHA256d4324c595c187cb358009cda11b834c3a3a42f8eb9a7ba3616bbc17a4b552a10
SHA512f1fef00b09a38e7bed76c15bd0f787e13b3a902626c97a3ce606869d06a91657d1fcd7910cf112cb05fb7e6b05c689dbaa95da13f67b3a6234126f6216af7d40