Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
15/07/2024, 03:33
Static task
static1
Behavioral task
behavioral1
Sample
4808e7d75b639a8b11e1371cc9e6d4f2_JaffaCakes118.exe
Resource
win7-20240705-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4808e7d75b639a8b11e1371cc9e6d4f2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
-
Target
4808e7d75b639a8b11e1371cc9e6d4f2_JaffaCakes118.exe
-
Size
635KB
-
MD5
4808e7d75b639a8b11e1371cc9e6d4f2
-
SHA1
0ee5992b1b158700c1184de992ea8491ea070881
-
SHA256
678b6491ad98bdfeeaa54a9fcfa8516813e42c425b9b869e524d28404a85e9a8
-
SHA512
592c69aa89e0a7f73dd63e90923e8f47bb20884c24605f79354196ace2e365231ad101cd60e1ed0803d3bd2420ab02f7db9ea4105059dfa9719894f7a6d32fcf
-
SSDEEP
12288:Ub8XfpFb6r7AoNqyo5D7JYq8ZD4obB2WDJsAumQPRISPhEpwF:U6pwr7AoNqyo5/JYqclbB2WDfumQPRBH
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2604 4808e7d75b639a8b11e1371cc9e6d4f2_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2604 4808e7d75b639a8b11e1371cc9e6d4f2_JaffaCakes118.exe 2604 4808e7d75b639a8b11e1371cc9e6d4f2_JaffaCakes118.exe