c164da52c21e0d8b4ec2508fbdbe8195a32c112fa81dd1000565cfd0701ae85a

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
01/08/2024, 21:22

Target

81c6cdcd3a59f90bfeabbda76572463e_JaffaCakes118.exe
Size

72KB
MD5

81c6cdcd3a59f90bfeabbda76572463e
SHA1

cfd49b95f96948d8fd11b9e585ac72e27b18bc17
SHA256

c164da52c21e0d8b4ec2508fbdbe8195a32c112fa81dd1000565cfd0701ae85a
SHA512

be9c416d6c29075a09be91144065e24e0644fc2cd99ded51d970843daaef057921e911c724427355ce214132f5dddc10077eb8f41669e0f5e26d0f3fdb878b09
SSDEEP

1536:+eVx8wCUqoOOu69LaaPS0jDdweeix+l/uj6pJnngrea:2+qoOO9Laaq8poNEjMng9

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1728	81c6cdcd3a59f90bfeabbda76572463e_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\81c6cdcd3a59f90bfeabbda76572463e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\81c6cdcd3a59f90bfeabbda76572463e_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1728

memory/1728-0-0x000007FEF5ABE000-0x000007FEF5ABF000-memory.dmp

Filesize
4KB

Download
memory/1728-1-0x000007FEF5800000-0x000007FEF619D000-memory.dmp

Filesize
9.6MB

Download
memory/1728-2-0x000007FEF5800000-0x000007FEF619D000-memory.dmp

Filesize
9.6MB

Download
memory/1728-3-0x000007FEF5800000-0x000007FEF619D000-memory.dmp

Filesize
9.6MB

Download
memory/1728-4-0x000007FEF5800000-0x000007FEF619D000-memory.dmp

Filesize
9.6MB

Download
memory/1728-5-0x000007FEF5800000-0x000007FEF619D000-memory.dmp

Filesize
9.6MB

Download
memory/1728-6-0x000007FEF5ABE000-0x000007FEF5ABF000-memory.dmp

Filesize
4KB

Download
memory/1728-7-0x000007FEF5800000-0x000007FEF619D000-memory.dmp

Filesize
9.6MB

Download