78b23d2e8f9960785305de6c42caab855f88764e08cb4d7223ff28b10253066a

Analysis

max time kernel
145s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
16-07-2024 10:29

Target

4deacddd0ca4ab69a98ec838673c0ea2_JaffaCakes118.exe
Size

557KB
MD5

4deacddd0ca4ab69a98ec838673c0ea2
SHA1

2df93dd6a1f2c720c0a621d41d867ffa36d31916
SHA256

78b23d2e8f9960785305de6c42caab855f88764e08cb4d7223ff28b10253066a
SHA512

1b9bb9264ccf8f7b2cbc9d5470ffb32b859bb606830a8bd5d7805e153007aeb464f14b28a6f8acf74326adea3940c08c34d58cdb3c1a991ebd60c797b6e30f76
SSDEEP

6144:R9Qm8GLd2uqgxL51HriPH0tuVyX7dPUiGByruhBOgxNgWbvoNdhOlb5ESWLboeC+:cm8GLd2uq+FrZfVruTgavEOUfcY05K5

Score

5^/10

Drops file in System32 directory 3 IoCs

description	ioc	Process
File created	C:\windows\SysWOW64\reg_201.txt	4deacddd0ca4ab69a98ec838673c0ea2_JaffaCakes118.exe
File created	C:\WINDOWS\SysWOW64\mc32.exe	4deacddd0ca4ab69a98ec838673c0ea2_JaffaCakes118.exe
File opened for modification	C:\WINDOWS\SysWOW64\mc32.exe	4deacddd0ca4ab69a98ec838673c0ea2_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\4deacddd0ca4ab69a98ec838673c0ea2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4deacddd0ca4ab69a98ec838673c0ea2_JaffaCakes118.exe"
1⤵
- Drops file in System32 directory
PID:2132

memory/2132-0-0x0000000002240000-0x0000000002241000-memory.dmp

Filesize
4KB

Download
memory/2132-2-0x0000000000400000-0x0000000000492000-memory.dmp

Filesize
584KB

Download
memory/2132-4-0x0000000002240000-0x0000000002241000-memory.dmp

Filesize
4KB

Download
memory/2132-5-0x0000000000400000-0x0000000000492000-memory.dmp

Filesize
584KB

Download