fd1d6d8f6b389d5b886850281ee7c376e93a8654b33f7a5cc0625ad91e0e5be3

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/07/2024, 04:23

Target

2110d781852162327cd9479f2fd06399_JaffaCakes118.exe
Size

152KB
MD5

2110d781852162327cd9479f2fd06399
SHA1

229d7e3e78646578051b13944b5f7e2f711616eb
SHA256

fd1d6d8f6b389d5b886850281ee7c376e93a8654b33f7a5cc0625ad91e0e5be3
SHA512

83b9a70fc2ee246d39e6ac00ccedcaa5d5e1ced022a84b153851d6177bf1cee8e42b6ff32658b1d981e75b5bd414d4aeee486563b318fda7b6a36cbec02f92a4
SSDEEP

1536:DQ/oFabv/Ut4GatogyotCpc49VUICR3rS6M73DIYdVtmju0kqwgQCUNSqoi9kgbc:dIL5G2oJoBg2Zr6Y

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings	rundll32.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3888	2110d781852162327cd9479f2fd06399_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\2110d781852162327cd9479f2fd06399_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2110d781852162327cd9479f2fd06399_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3888

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\FirewallControlPanel.dll,ShowWarningDialog "C:\Users\Admin\AppData\Local\Temp\2110d781852162327cd9479f2fd06399_JaffaCakes118.exe"
1⤵
- Modifies registry class
PID:3956