Overview
overview
7Static
static
35219a00b4c...18.exe
windows7-x64
75219a00b4c...18.exe
windows10-2004-x64
7$EXEFILE.exe
windows7-x64
1$EXEFILE.exe
windows10-2004-x64
1$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$TEMP/$EXEFILE.exe
windows7-x64
1$TEMP/$EXEFILE.exe
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
17-10-2024 12:45
Static task
static1
Behavioral task
behavioral1
Sample
5219a00b4c65f0110127465ff1e668c1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5219a00b4c65f0110127465ff1e668c1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$EXEFILE.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$EXEFILE.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Banner.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsisdl.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsisdl.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
$TEMP/$EXEFILE.exe
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
$TEMP/$EXEFILE.exe
Resource
win10v2004-20241007-en
General
-
Target
$TEMP/$EXEFILE.exe
-
Size
6KB
-
MD5
5861e9267892e1f14793b1097508b325
-
SHA1
5a6a89e6a42673c0662396bdd63053f387a34b33
-
SHA256
6334231bf67a2c5b52ea79cd234298cb0da81da4f939835a4adf243d19f886ae
-
SHA512
1790085c5a4f1ae5ce6bac8d755e9f9c8a6444769a784197b58714d778ea624caccc6628546005146902235a83743ea13c615694411d0e50c1a3f68df371779f
-
SSDEEP
96:O7x4GFlhgpfbhTX/Rfo/EsL2fZ3JLBOCCMtmOaxhwwT:OxVfKbFX/RASR3uCvtmhHD
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2172 $EXEFILE.exe 2172 $EXEFILE.exe