9cd9ac4a5505285d2d4af595939ea24a779896f600d796b5c95c8b763d4889b4

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 06:29

Target

489ba1a8a737955a96b82774f566aa0e_JaffaCakes118.exe
Size

44KB
MD5

489ba1a8a737955a96b82774f566aa0e
SHA1

8727f9efb7278d6f94450e9ed3f40661814be2d3
SHA256

9cd9ac4a5505285d2d4af595939ea24a779896f600d796b5c95c8b763d4889b4
SHA512

4932b5a86b18099bad2ee9a725902831225503c5f5f98eb70f5633fc0093866acec38b8626c0c9216c5cbd3ed0c4d46ed5c019bfc72c375adfc6390e9b23034f
SSDEEP

768:hoNI1mYXVDlVo5pTSkelXIqWoBP1t2a6aEAE9puSjgHZh:hoNIPoPyIqfBP10sZ

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2028	489ba1a8a737955a96b82774f566aa0e_JaffaCakes118.exe
2028	489ba1a8a737955a96b82774f566aa0e_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\489ba1a8a737955a96b82774f566aa0e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\489ba1a8a737955a96b82774f566aa0e_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2028