f330c3c01d23fe8f77a29138a8ef6c9ad3580b8cf66370283192cba12f66a4ec

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28-03-2024 18:31

Target

0cebaa2b4a8d907f455cccfbc664af72_JaffaCakes118.exe
Size

1.9MB
MD5

0cebaa2b4a8d907f455cccfbc664af72
SHA1

6b81658b003a1cf6f8a75139b9d56ed25646e23d
SHA256

f330c3c01d23fe8f77a29138a8ef6c9ad3580b8cf66370283192cba12f66a4ec
SHA512

ad8afe87356bd35dc050f1cd101faf425194f74ce25471332c9a759e8034132f491a0e7f3f49570ac19c4fff69a1d8a54c9e32f0e1e56b82406158a1b1b66363
SSDEEP

49152:NOD0g7mM+M6RkMkIM7I067yqnstLet3Lyeu:DM+M6RkMkIM7dqnstLE1u

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3036	0cebaa2b4a8d907f455cccfbc664af72_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\0cebaa2b4a8d907f455cccfbc664af72_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0cebaa2b4a8d907f455cccfbc664af72_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3036