Analysis
-
max time kernel
140s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
19/07/2024, 08:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5b1eb46fb02023fc3bb93e43aa1aa223_JaffaCakes118.exe
Resource
win7-20240708-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5b1eb46fb02023fc3bb93e43aa1aa223_JaffaCakes118.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
General
-
Target
5b1eb46fb02023fc3bb93e43aa1aa223_JaffaCakes118.exe
-
Size
791KB
-
MD5
5b1eb46fb02023fc3bb93e43aa1aa223
-
SHA1
8c06b898bcc691c1b0dbd04a300e91de492fb46e
-
SHA256
1321a0835a69b0ce0b4326730f10786eaa3c1c84cba7bed7338b1963e02e93e8
-
SHA512
5dcc096f20f591e2e00b6a335e3e9c5fa84f434e6c1379ea754c47662bdf291d105dbb5a6b7cb09920675ae8030c9276a73708078ad225034cf05b8d20a678cd
-
SSDEEP
12288:n0BqwPeczAvREKZqYLeCWYgg7MEwYTWmQ7cEtLe+0Vf6vQ0Rf/c9SxP:BSedvREkqYiSDTwYTWmQ7cEtK/hWEI
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2416 5b1eb46fb02023fc3bb93e43aa1aa223_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2416 5b1eb46fb02023fc3bb93e43aa1aa223_JaffaCakes118.exe 2416 5b1eb46fb02023fc3bb93e43aa1aa223_JaffaCakes118.exe