Overview
overview
7Static
static
345b3053c2e...18.exe
windows7-x64
745b3053c2e...18.exe
windows10-2004-x64
7$EXEFILE.exe
windows7-x64
1$EXEFILE.exe
windows10-2004-x64
1$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$TEMP/$EXEFILE.exe
windows7-x64
1$TEMP/$EXEFILE.exe
windows10-2004-x64
1Analysis
-
max time kernel
63s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
15-10-2024 03:51
Static task
static1
Behavioral task
behavioral1
Sample
45b3053c2e337bbb55dfeebf0384364f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45b3053c2e337bbb55dfeebf0384364f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$EXEFILE.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
$EXEFILE.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsisdl.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsisdl.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
$TEMP/$EXEFILE.exe
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
$TEMP/$EXEFILE.exe
Resource
win10v2004-20241007-en
General
-
Target
$EXEFILE.exe
-
Size
6KB
-
MD5
2b541619d0e83432db441b0ef68037b0
-
SHA1
ca22e95a0205f03beb750bbff40c4757d0ffb9da
-
SHA256
d88561a49b2dd0c49a87b34b2d884ba20bb3828377153b45bedf731c3edb7d09
-
SHA512
09c67022ac571a7ffc42421e9fc48e97631b9a29d92e7d3b5e5d3f2ce026d0e53f25a38c8fc0105fe77c3b14efd538e079ae50b8cb872add71dd1664ad3f5914
-
SSDEEP
96:F/xEAOhcoR5m76X/Rlo/u5LaXilLBOCPK3e/axh2k+v8:txUaOm76X/RS2syaC8FHuv8
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1464 $EXEFILE.exe 1464 $EXEFILE.exe