f9658fd13c32739bb570eb3ab55140706f3e7ff6ffaede794b36bc90c5e0b120

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
02/05/2024, 01:46

Target

0d24d18703835242b05629e4f649bf13_JaffaCakes118.exe
Size

120KB
MD5

0d24d18703835242b05629e4f649bf13
SHA1

2e9abc3659b704e879a503fdcc6c47380507f7a7
SHA256

f9658fd13c32739bb570eb3ab55140706f3e7ff6ffaede794b36bc90c5e0b120
SHA512

8ea3232b69a255cac55d353adf9507e2367827840aba59911a3b96a1da4be7a290d406561acc1a0e27cf23e4963180d7f0e889e6c8485ebf33967099b0ae7c14
SSDEEP

1536:vY2a02H0tBIzvpyfikCcUZtErT+h8PrvwPi44N6ZkEllc/4gu:hclFMTT+hEsPLCEL+y

Score

1^/10

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\thgkc\\command	0d24d18703835242b05629e4f649bf13_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node	0d24d18703835242b05629e4f649bf13_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\thgkc	0d24d18703835242b05629e4f649bf13_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\thgkc	0d24d18703835242b05629e4f649bf13_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell	0d24d18703835242b05629e4f649bf13_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID	0d24d18703835242b05629e4f649bf13_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}	0d24d18703835242b05629e4f649bf13_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\0d24d18703835242b05629e4f649bf13_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0d24d18703835242b05629e4f649bf13_JaffaCakes118.exe"
1⤵
- Modifies registry class
PID:1664