Analysis
-
max time kernel
118s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
15/09/2024, 02:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e188c5f08509525bc2c92cb5b97f3e7f_JaffaCakes118.exe
Resource
win7-20240903-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e188c5f08509525bc2c92cb5b97f3e7f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
2 signatures
150 seconds
General
-
Target
e188c5f08509525bc2c92cb5b97f3e7f_JaffaCakes118.exe
-
Size
5.0MB
-
MD5
e188c5f08509525bc2c92cb5b97f3e7f
-
SHA1
1de176bc5bf9ea9e6f374836b02678d9e019b4bf
-
SHA256
92f5f8f4b62caca9910bf9af2b881a1a9d3883dc5cf7803a935236cd7fbe94dc
-
SHA512
9da820be328afadaac03ddc250fd7b7098e99d37da392db40d96ca714cfcaae0065954bf7e95d44fb4cc40116a6614a4f437ac74fc520fe495b95778de66a408
-
SSDEEP
98304:2vxcAGYG5F1N4FY3F/9LKT6mnFQzyBz3trO:2u7YEDiFI/1LzyB
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 884 e188c5f08509525bc2c92cb5b97f3e7f_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 884 e188c5f08509525bc2c92cb5b97f3e7f_JaffaCakes118.exe