801914278172908799d722fdd08a6a286c40b7f0c1cf1a5d7389e661b3b65e2e

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
17/10/2024, 18:46

Target

5326f8e074b551d196066c09610043d2_JaffaCakes118.exe
Size

3.1MB
MD5

5326f8e074b551d196066c09610043d2
SHA1

e363a0816981c15de8c7c6ecb67142f286c55e89
SHA256

801914278172908799d722fdd08a6a286c40b7f0c1cf1a5d7389e661b3b65e2e
SHA512

0646d132d251fc8eba01c5d86b266ef75f9552259696d9ddf9e7eb5b3ac1d31867cc89cd6a80b35f368dbf25c726b0d9856860b2065e0c8584216aec0b263c1f
SSDEEP

49152:Wvx1wnNTBx40yZqhaK6zbfqdltHF+3j5D78OBUEakOElMaFLk:cGwx0Cs1Eak7

Score

4^/10

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Debug\WIA\wiatrace.log	5326f8e074b551d196066c09610043d2_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\5326f8e074b551d196066c09610043d2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\5326f8e074b551d196066c09610043d2_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:1428

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:1644