Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
19/07/2024, 19:24
Behavioral task
behavioral1
Sample
5d534e124deb69c5d2e7dd368591fac7_JaffaCakes118.exe
Resource
win7-20240708-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5d534e124deb69c5d2e7dd368591fac7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
-
Target
5d534e124deb69c5d2e7dd368591fac7_JaffaCakes118.exe
-
Size
30KB
-
MD5
5d534e124deb69c5d2e7dd368591fac7
-
SHA1
611e2744c16d0d12b760bf9e06cba1187795f2de
-
SHA256
e3eae85fde93a08a19140a3ea78f8a542dbb841ec188ad8772aec2801b87553c
-
SHA512
7a784e8302fd0dcee6f94b821f6a6e0c2fe217663e9e6a05d49747e8edc6b4f141843526df230a6cdf7eb4ed168019b4b0486755fc23feb359a07617876864c6
-
SSDEEP
384:dfL9KH089nJ3zkhQj41s83xP+B6GEKD/Kx89FIZTZC:NBqvjkhf+8B+B6GrKY80
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1700-0-0x0000000000400000-0x000000000040B000-memory.dmp upx behavioral1/memory/1700-1-0x0000000000400000-0x000000000040B000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1700 5d534e124deb69c5d2e7dd368591fac7_JaffaCakes118.exe 1700 5d534e124deb69c5d2e7dd368591fac7_JaffaCakes118.exe