Analysis
-
max time kernel
150s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
15/07/2024, 03:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe
Resource
win7-20240705-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
-
Target
4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe
-
Size
2.4MB
-
MD5
4805e90a901eb894fe640ca4abfb0911
-
SHA1
bb219c7d028c6ea23eba61ecc574d2f29576ae49
-
SHA256
d13477a48b023d312b49ddb17b67955dbfb979232e3b91ee1e20dd536f5d59d0
-
SHA512
dd25bae821e6d31dfac11d7a2fdb3a6553876ab8cb2bd7f3b69a32da3e2bdfc622c5ac073f1594444997bc502f36cb46f14573c5d60c6d2aefb4fe000b1b88e5
-
SSDEEP
49152:CSx7EmVU+YzANv0HNOEeTTJfyg5Q9VGqVn16bB2:CSx7VOANcGfyMQ9Lx16bB2
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs
pid Process 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe 2080 4805e90a901eb894fe640ca4abfb0911_JaffaCakes118.exe