39424b0c901d076f6e7a50da7d2a19f3f0c4b34a1e58ba6cc08ca6d51962c1f9

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
29/03/2024, 16:29

Target

26e7ca59f07a1c8d5ae555cf129927b4_JaffaCakes118.exe
Size

977KB
MD5

26e7ca59f07a1c8d5ae555cf129927b4
SHA1

778005b2de1240c6f7a331f261b2f4c1f1dfb7ee
SHA256

39424b0c901d076f6e7a50da7d2a19f3f0c4b34a1e58ba6cc08ca6d51962c1f9
SHA512

df991f5d772e0fe8d42608840ad9e5bf3e0f381bbdbb725099642b7494884e298b4f7193633305877fec8e4837bfe74833ae385c4728cf3f1441886efd6d2d3f
SSDEEP

12288:W8bP3nCeu+kjxo8ISXgJW7jxo8ISCxb8c+WxDGQWH179ZBXH/EgzurlB8:W8OB+V8tgJd8sxI7Hh9ZBXfwlG

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2204	26e7ca59f07a1c8d5ae555cf129927b4_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\26e7ca59f07a1c8d5ae555cf129927b4_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\26e7ca59f07a1c8d5ae555cf129927b4_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2204