e23ea710b409bd5c06a676eb48016d2745185a6ea71afd14cdbf95a83a03a8dc

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19/04/2024, 23:01

Target

fb5b71efb23bcd66420ac1a9020fe25a_JaffaCakes118.exe
Size

140KB
MD5

fb5b71efb23bcd66420ac1a9020fe25a
SHA1

d4aa35579eece42109e9a6c4470178920268c432
SHA256

e23ea710b409bd5c06a676eb48016d2745185a6ea71afd14cdbf95a83a03a8dc
SHA512

863a105f7625d49bac8104cdb9ae4456a8d304a058e19ae61b16107d909c9640f8993209a9e134aa513d8f57f27abbaf285286c1327471e47b3413a88f91d960
SSDEEP

1536:0AyF/bGKqKZRk2Nh2lAWZJLcwwmnoqZJLmq0UeGo9x5seX+xg:0Ay1qKZRkwElBZJL1oqZJLmnGoH5Exg

Score

5^/10

Drops file in System32 directory 3 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\DCOMLOAD.EXE	fb5b71efb23bcd66420ac1a9020fe25a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\SDCOMLOAD.EXE	fb5b71efb23bcd66420ac1a9020fe25a_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\DCOMLOAD.EXE	fb5b71efb23bcd66420ac1a9020fe25a_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\fb5b71efb23bcd66420ac1a9020fe25a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fb5b71efb23bcd66420ac1a9020fe25a_JaffaCakes118.exe"
1⤵
- Drops file in System32 directory
PID:1336