90e36c696586377a393f7c26bcbdd94c17eb4a42b5e1a9441d69522d8dbbf14a

Analysis

max time kernel
92s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
14/07/2024, 03:01

Target

4407072e7cf3e1337ea2b30dd6fbea1c_JaffaCakes118.exe
Size

144KB
MD5

4407072e7cf3e1337ea2b30dd6fbea1c
SHA1

f2f6fa320e30ebe7eb029ee7dd9af5b6099ea6c4
SHA256

90e36c696586377a393f7c26bcbdd94c17eb4a42b5e1a9441d69522d8dbbf14a
SHA512

351b926a23cafb58d4936b5ccbac0d7235b653bf9babca9a7155b83b43ca13fee68e99dd7653675c56bb170197d04e0d0920dec799d586392f3a4aa7174383ea
SSDEEP

1536:q5bkjbD6UmDEFDJcVOpUuU28ol+FyjgJTbtjhv/HsqPzkhnwRmY/0YXVolJs:qcbtFDJcoSl2SLJTb1hv/HXAY/BXVole

Score

1^/10

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\vhjwy	4407072e7cf3e1337ea2b30dd6fbea1c_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\vhjwy	4407072e7cf3e1337ea2b30dd6fbea1c_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell	4407072e7cf3e1337ea2b30dd6fbea1c_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID	4407072e7cf3e1337ea2b30dd6fbea1c_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}	4407072e7cf3e1337ea2b30dd6fbea1c_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\\shell\\vhjwy\\command	4407072e7cf3e1337ea2b30dd6fbea1c_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	4407072e7cf3e1337ea2b30dd6fbea1c_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\4407072e7cf3e1337ea2b30dd6fbea1c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4407072e7cf3e1337ea2b30dd6fbea1c_JaffaCakes118.exe"
1⤵
- Modifies registry class
PID:3740