Overview
overview
5Static
static
52b84d89259...18.exe
windows7-x64
32b84d89259...18.exe
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3e$EXEFILE.exe
windows7-x64
3e$EXEFILE.exe
windows10-2004-x64
1wget.exe
windows7-x64
5wget.exe
windows10-2004-x64
5Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09/10/2024, 05:16
Behavioral task
behavioral1
Sample
2b84d89259fc17bbf9f731ba78e97b4f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b84d89259fc17bbf9f731ba78e97b4f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
e$EXEFILE.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
e$EXEFILE.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
wget.exe
Resource
win7-20240708-en
General
-
Target
e$EXEFILE.exe
-
Size
601KB
-
MD5
00961172ece76f41adae8759d728b2a6
-
SHA1
0b86d0f2d367e61eb0a37648dfdf46d4b080c8a8
-
SHA256
3b83f41249c7b3e6249e348ccbfbfc9be0f973c1bd65cf021e93dda712a3769d
-
SHA512
67d06465886520898233a60becb853db6ac6de700073ccb2c1b16f868caf6ed6426ac14f53a43ec29526daf6dbd75c32e0fa87d6b21d26f72fc105c49c734c94
-
SSDEEP
6144:qDix0OuDbQhEwaqfKBF2OyjHp/g39krWtR2g/1zPzbIdCSpckXB8buCwM:qDix0OQwLEOjJY3s617Idb/t
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3692 e$EXEFILE.exe 3692 e$EXEFILE.exe