Overview
overview
7Static
static
32a5f6cb515...18.exe
windows7-x64
72a5f6cb515...18.exe
windows10-2004-x64
7$EXEFILE.exe
windows7-x64
1$EXEFILE.exe
windows10-2004-x64
1$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$TEMP/$EXEFILE.exe
windows7-x64
1$TEMP/$EXEFILE.exe
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09-10-2024 03:54
Static task
static1
Behavioral task
behavioral1
Sample
2a5f6cb515e4a6fd1ecb702014a92797_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a5f6cb515e4a6fd1ecb702014a92797_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$EXEFILE.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$EXEFILE.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsisdl.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsisdl.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
$TEMP/$EXEFILE.exe
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
$TEMP/$EXEFILE.exe
Resource
win10v2004-20241007-en
General
-
Target
$TEMP/$EXEFILE.exe
-
Size
6KB
-
MD5
2b541619d0e83432db441b0ef68037b0
-
SHA1
ca22e95a0205f03beb750bbff40c4757d0ffb9da
-
SHA256
d88561a49b2dd0c49a87b34b2d884ba20bb3828377153b45bedf731c3edb7d09
-
SHA512
09c67022ac571a7ffc42421e9fc48e97631b9a29d92e7d3b5e5d3f2ce026d0e53f25a38c8fc0105fe77c3b14efd538e079ae50b8cb872add71dd1664ad3f5914
-
SSDEEP
96:F/xEAOhcoR5m76X/Rlo/u5LaXilLBOCPK3e/axh2k+v8:txUaOm76X/RS2syaC8FHuv8
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4048 $EXEFILE.exe 4048 $EXEFILE.exe