18d4fa603ca48ced12cf641cef5b416fa29c5947188c3d7681f32954998dfdc7

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/03/2024, 14:54

Target

087e435011290b3a3a5455c3409b60f9_JaffaCakes118.exe
Size

9KB
MD5

087e435011290b3a3a5455c3409b60f9
SHA1

7593b7e829c5d162138b3dc0e31fea4b45c1b785
SHA256

18d4fa603ca48ced12cf641cef5b416fa29c5947188c3d7681f32954998dfdc7
SHA512

da4c5a52a7ac5599da63d981e980f941580cfb20811339481175ea881775c894d5cde0b260a82ece0df3a39557523e81ca9eea8e84ee41f267c3d73a09c843bf
SSDEEP

192:qBksuHE7+goGOLeMZZ3d93Vnjdwqze3CJOD:+2GOLeMnFnhwqKyJO

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2236	087e435011290b3a3a5455c3409b60f9_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 2512	2236	087e435011290b3a3a5455c3409b60f9_JaffaCakes118.exe	28
PID 2236 wrote to memory of 2512	2236	087e435011290b3a3a5455c3409b60f9_JaffaCakes118.exe	28
PID 2236 wrote to memory of 2512	2236	087e435011290b3a3a5455c3409b60f9_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\087e435011290b3a3a5455c3409b60f9_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\087e435011290b3a3a5455c3409b60f9_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2236 -s 900
  2⤵
  PID:2512

memory/2236-0-0x0000000000B40000-0x0000000000B48000-memory.dmp

Filesize
32KB

Download
memory/2236-1-0x000007FEF5C70000-0x000007FEF665C000-memory.dmp

Filesize
9.9MB

Download
memory/2236-2-0x000000001B5F0000-0x000000001B670000-memory.dmp

Filesize
512KB

Download
memory/2236-3-0x000007FEF5C70000-0x000007FEF665C000-memory.dmp

Filesize
9.9MB

Download
memory/2236-4-0x000000001B5F0000-0x000000001B670000-memory.dmp

Filesize
512KB

Download