9a16392037e12ad7aac42eed2a96c7128d8c2da99eec92edd2efae0e5ccd3138

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
27-06-2024 07:38

Target

152dfe633f80aabe06967e73fa9d8067_JaffaCakes118.exe
Size

220KB
MD5

152dfe633f80aabe06967e73fa9d8067
SHA1

067193951a3e2937e054542b4aaa277840ec1330
SHA256

9a16392037e12ad7aac42eed2a96c7128d8c2da99eec92edd2efae0e5ccd3138
SHA512

0555a4acb90263a3fdfea93dcb4696e4c46d195ff87472ce8b530fed84ccc3d9d0e7f90da353168730e66790e88bc6e9f4e075a313ef204ffa721aae6c581930
SSDEEP

3072:HbNEA3vdKLzCOHnvycfCs4d/2veJezsttqJkiB+9DEAPkovW+VTRg0xNJh:7NEA/dYKTd/uaEsznffV

Score

1^/10

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AVPKeyFile\Shell	152dfe633f80aabe06967e73fa9d8067_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AVPKeyFile\Shell\Open	152dfe633f80aabe06967e73fa9d8067_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AVPKeyFile\Shell\Open\Command\ = "c:\\users\\admin\\appdata\\local\\temp\\152dfe633f80aabe06967e73fa9d8067_jaffacakes118.exe \"%1\""	152dfe633f80aabe06967e73fa9d8067_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.key	152dfe633f80aabe06967e73fa9d8067_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "AVPKeyFile"	152dfe633f80aabe06967e73fa9d8067_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AVPKeyFile	152dfe633f80aabe06967e73fa9d8067_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AVPKeyFile\ = "AVP Key File"	152dfe633f80aabe06967e73fa9d8067_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AVPKeyFile\Shell\Open\Command	152dfe633f80aabe06967e73fa9d8067_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2156	152dfe633f80aabe06967e73fa9d8067_JaffaCakes118.exe
2156	152dfe633f80aabe06967e73fa9d8067_JaffaCakes118.exe