a05f65cf1219d8b6b854f2017b35228244a3d575b3fc9642216af2a44361e051

Analysis

max time kernel
16s
max time network
18s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 06:15

Target

5ac5e6f0f9a7b51cb79160673df1dd43_JaffaCakes118.exe
Size

519KB
MD5

5ac5e6f0f9a7b51cb79160673df1dd43
SHA1

dd3cdf0dbf19ef5e4595d48aa24f5d864cfeffb0
SHA256

a05f65cf1219d8b6b854f2017b35228244a3d575b3fc9642216af2a44361e051
SHA512

c1579badc55ef9a4d2c2c6bd7ce42fa17f9682c439a5071f1a100e51469d8417c6a81d2357a0d6fbf26e13cd8edc6e3016aee2be905a8aafa907395c2f559336
SSDEEP

3072:+rhZompu0lw5/tooJ7GeEA5POwAddddvmlJjtASY/kMgsC1YayYJlXjfjZqMNjsB:+Fwww5/jO2hFASYM9sCjyiZv9Cavo

Score

4^/10

Drops file in Program Files directory 3 IoCs

description	ioc	Process
File created	C:\Program Files\Zirgato\Awsopol\xwopaerem.zvy	5ac5e6f0f9a7b51cb79160673df1dd43_JaffaCakes118.exe
File created	C:\Program Files\Zirgato\Awsopol\qbopwgtu.exe	5ac5e6f0f9a7b51cb79160673df1dd43_JaffaCakes118.exe
File opened for modification	C:\Program Files\Zirgato\Awsopol\xwopaerem.zvy	5ac5e6f0f9a7b51cb79160673df1dd43_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\5ac5e6f0f9a7b51cb79160673df1dd43_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\5ac5e6f0f9a7b51cb79160673df1dd43_JaffaCakes118.exe"
1⤵
- Drops file in Program Files directory
PID:948