Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
23/07/2024, 09:34
Static task
static1
Behavioral task
behavioral1
Sample
67091fc9318f1a71fafc84e0e5103a9b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67091fc9318f1a71fafc84e0e5103a9b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67091fc9318f1a71fafc84e0e5103a9b_JaffaCakes118.exe
-
Size
625KB
-
MD5
67091fc9318f1a71fafc84e0e5103a9b
-
SHA1
cfcc7eee653fbb97e7d6f37f635ecfb7c8ff9c3d
-
SHA256
088516c53cf581a30d21b985bcd5d8d243c3a183ee265b3cc4982083e721fb26
-
SHA512
f2b9f20671ce3e8839c96ea7fa3dd4db713a0b70c928cf649461a5382cb1e7d1899024e03bf03a553ec48a4acc2b45130034f432293242371a36ff2b09183ecb
-
SSDEEP
12288:t1/9xpqKL3/Q7vP+7JYapP9057qwjH8PTmMdAHIPhoYwhq5pTK:t11xcKL3/Q7vPQJYEs75jH8ZdAH2r/K
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5064 67091fc9318f1a71fafc84e0e5103a9b_JaffaCakes118.exe 5064 67091fc9318f1a71fafc84e0e5103a9b_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5064 67091fc9318f1a71fafc84e0e5103a9b_JaffaCakes118.exe 5064 67091fc9318f1a71fafc84e0e5103a9b_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6KB
MD5c0c7cfa23e98a9f569e3e999d5ca30c8
SHA19b35432f210cc94a270d9c2e0a9b82b8645dff0c
SHA256e799893162476875927a3cf494910be13da3c648b48eaee219c5a5479265760c
SHA5128039ba274822dae2c85713ae840cc509c3f7479d5190f61a06d85a66fe87a022f1d6bb875f4f8a0cebb18060b120cfcf53ea6b233ed7147c1fc381e047fd03fd