e450c51876f3bb1e7d8c233fdf44745471e3c3c24a3fc390387b0f7fb268ea74

Analysis

max time kernel
140s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
28/06/2024, 14:13

Target

1a6ef2d95a6bd1424013f380876597aa_JaffaCakes118.exe
Size

173KB
MD5

1a6ef2d95a6bd1424013f380876597aa
SHA1

51b0a201e1acb78702a86a9f41b5884ffd53a554
SHA256

e450c51876f3bb1e7d8c233fdf44745471e3c3c24a3fc390387b0f7fb268ea74
SHA512

6960dfd29361be3ad32622b27443fe16637367c3310c2989f203f0da4c787e131f69b99ea3c6606804928e9732864f07044a365c381f44798228b246a4dcc022
SSDEEP

3072:LFYZzOR43lGfMuTsPO7dXcYjwyhuuWQvKgTon861ocAF+kVFqVv39:BYZOI43fO8mOJFsv

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1932	AppMess

Drops file in System32 directory 3 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\AppMess	1a6ef2d95a6bd1424013f380876597aa_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\AppMess	1a6ef2d95a6bd1424013f380876597aa_JaffaCakes118.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\sLT.exf	AppMess

C:\Users\Admin\AppData\Local\Temp\1a6ef2d95a6bd1424013f380876597aa_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1a6ef2d95a6bd1424013f380876597aa_JaffaCakes118.exe"
1⤵
- Drops file in System32 directory
PID:1368

C:\Windows\SysWOW64\AppMess

Filesize
173KB

MD5
1a6ef2d95a6bd1424013f380876597aa

SHA1
51b0a201e1acb78702a86a9f41b5884ffd53a554

SHA256
e450c51876f3bb1e7d8c233fdf44745471e3c3c24a3fc390387b0f7fb268ea74

SHA512
6960dfd29361be3ad32622b27443fe16637367c3310c2989f203f0da4c787e131f69b99ea3c6606804928e9732864f07044a365c381f44798228b246a4dcc022

Download Submit
memory/1368-2-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download
memory/1932-4-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download