596307c616157f76ceeee799c3a955577eb376f7780ccb29647e4416afe21c02

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
28-06-2024 13:54

Target

1a5fb319e8b8161f2c9c3ef7c8eb1316_JaffaCakes118.exe
Size

144KB
MD5

1a5fb319e8b8161f2c9c3ef7c8eb1316
SHA1

b00e0c54f60dd5c9f7faa74505801c76bf410af4
SHA256

596307c616157f76ceeee799c3a955577eb376f7780ccb29647e4416afe21c02
SHA512

02b8ff9f23b1ecd07e927929268129bbf9a70d81c195dc9b704483ff339d6fbc7e47b144e20e3fe49d6f7a615d2a878d143f593d4bac7e84e50dda422b8ac0ff
SSDEEP

3072:gcnTcJ3l0Jr32MgctNbvJsqL5jOX614XzGyKC:1nAIrmMPNbvGS5jk61qGyKC

Score

1^/10

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell	1a5fb319e8b8161f2c9c3ef7c8eb1316_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID	1a5fb319e8b8161f2c9c3ef7c8eb1316_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}	1a5fb319e8b8161f2c9c3ef7c8eb1316_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\birue\\command	1a5fb319e8b8161f2c9c3ef7c8eb1316_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node	1a5fb319e8b8161f2c9c3ef7c8eb1316_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\birue	1a5fb319e8b8161f2c9c3ef7c8eb1316_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\birue	1a5fb319e8b8161f2c9c3ef7c8eb1316_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\1a5fb319e8b8161f2c9c3ef7c8eb1316_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1a5fb319e8b8161f2c9c3ef7c8eb1316_JaffaCakes118.exe"
1⤵
- Modifies registry class
PID:2264