dae6557ddb003d69b59f41546304ceb605ee825538ae96fbf57fc87f24b283e0

Analysis

max time kernel
141s
max time network
19s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
31-10-2024 08:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe
Size

11KB
MD5

82778e0dbe25d4ef2124c8449a386967
SHA1

eee4025d0f4d37c8c4d9b2deb6797f41e4ea3f53
SHA256

dae6557ddb003d69b59f41546304ceb605ee825538ae96fbf57fc87f24b283e0
SHA512

78084a729c4cff3e97b49520c75a32b15395ea15082dc1405b0c26a64e8a6822630a762c58c900c04ff8073ae48ec6072da3acf6b31a2c65ca7949fe81aa70b8
SSDEEP

192:nPt+gYZUji8WZ2FWIGG3Lkdp+NVwtc2RfHF7ch67NLsObMWW:PEgYZXZlLCeCutc2tHFgh6hJW

Score

1^/10

Malware Config

Signatures

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BABFBA82-CF30-DD79-FF60-32E3BA8BBD21}	82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BABFBA82-CF30-DD79-FF60-32E3BA8BBD21}\LocalServer32	82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BABFBA82-CF30-DD79-FF60-32E3BA8BBD21}\Data	82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BABFBA82-CF30-DD79-FF60-32E3BA8BBD21}\Data\ = 0000000085da815a00000000000000000000000000000000	82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BABFBA82-CF30-DD79-FF60-32E3BA8BBD21}\Data\ = 0000000085da815a00000000000000000000000000000000	82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BABFBA82-CF30-DD79-FF60-32E3BA8BBD21}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe"	82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BABFBA82-CF30-DD79-FF60-32E3BA8BBD21}	82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BABFBA82-CF30-DD79-FF60-32E3BA8BBD21}\LocalServer32	82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BABFBA82-CF30-DD79-FF60-32E3BA8BBD21}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe"	82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{BABFBA82-CF30-DD79-FF60-32E3BA8BBD21}\Data	82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe"
1⤵
- Modifies registry class
PID:2388

C:\Users\Admin\AppData\Local\Temp\82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\82778e0dbe25d4ef2124c8449a386967_JaffaCakes118.exe" /s
1⤵
- Modifies registry class
PID:3012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2388-0-0x0000000000400000-0x000000000040A509-memory.dmp

Filesize
41KB

Download
memory/2388-1-0x0000000000400000-0x000000000040A509-memory.dmp

Filesize
41KB

Download
memory/3012-2-0x0000000000400000-0x000000000040A509-memory.dmp

Filesize
41KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads