44d31eef630d6062365f2adb168cceb9c4c31276530442ad6b0b912603f075fa

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
28/03/2024, 23:55

Target

132ad16a14bce9eaca42b89f8590d77b_JaffaCakes118.exe
Size

9KB
MD5

132ad16a14bce9eaca42b89f8590d77b
SHA1

6b021d5ba233655174c8c0e29bb52eb3d0c29801
SHA256

44d31eef630d6062365f2adb168cceb9c4c31276530442ad6b0b912603f075fa
SHA512

80ef2b2745dc7c8495905668246a02c2c622ed1756ccbf837f4392d0c389382d7d808bd36ef3d3942561bb021f1d1a04ecb3f8ba38ddc85e80c191615b60c377
SSDEEP

192:bBksuTDUSOV2ouK1eMZZ3K93VnjdwCzR3JeTw:Cc1eMmFnhwCt5eT

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2356	132ad16a14bce9eaca42b89f8590d77b_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2356 wrote to memory of 2588	2356	132ad16a14bce9eaca42b89f8590d77b_JaffaCakes118.exe	28
PID 2356 wrote to memory of 2588	2356	132ad16a14bce9eaca42b89f8590d77b_JaffaCakes118.exe	28
PID 2356 wrote to memory of 2588	2356	132ad16a14bce9eaca42b89f8590d77b_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\132ad16a14bce9eaca42b89f8590d77b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\132ad16a14bce9eaca42b89f8590d77b_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2356
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2356 -s 892
  2⤵
  PID:2588

memory/2356-0-0x0000000000B80000-0x0000000000B88000-memory.dmp

Filesize
32KB

Download
memory/2356-1-0x000007FEF5BD0000-0x000007FEF65BC000-memory.dmp

Filesize
9.9MB

Download
memory/2356-2-0x000000001B2C0000-0x000000001B340000-memory.dmp

Filesize
512KB

Download
memory/2356-3-0x000007FEF5BD0000-0x000007FEF65BC000-memory.dmp

Filesize
9.9MB

Download
memory/2356-4-0x000000001B2C0000-0x000000001B340000-memory.dmp

Filesize
512KB

Download