Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
19-07-2024 03:22
Behavioral task
behavioral1
Sample
5a44e9d9a4047d61520b19add0f90e40_JaffaCakes118.exe
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5a44e9d9a4047d61520b19add0f90e40_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
5a44e9d9a4047d61520b19add0f90e40_JaffaCakes118.exe
-
Size
372KB
-
MD5
5a44e9d9a4047d61520b19add0f90e40
-
SHA1
0e56cfb1eac7c49f88896a3a6439791592f3c0a9
-
SHA256
60271fe97d24e9c2d1782236bb808ea22ac53b9294492f558a2b7ffd63e9c0be
-
SHA512
49f4e75bdd5102e85caabdc73ab034113b0bce6182dfa38f4f3a00df24ecb81af1cbf7685fce42b94c36ff658db777ba784e688524b6c64b7715cf43750f45a6
-
SSDEEP
6144:P30a1ndMhZrLVIRNpIZvrHxZe1SdCpxEuV+mTWS2dp9s+xr8Aoy+1WTJA22iZY:Pz1dMhAfevBsTBO9VxYFy//2MY
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4636 5a44e9d9a4047d61520b19add0f90e40_JaffaCakes118.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4636 5a44e9d9a4047d61520b19add0f90e40_JaffaCakes118.exe