e623f3f910491cfa266de6e8bee9ece9b3f381a819c749ca5880e72e766467fd

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
05/04/2024, 09:01

Target

cf4f46e5425d04a33d129abf7ab1f6f5_JaffaCakes118.exe
Size

9KB
MD5

cf4f46e5425d04a33d129abf7ab1f6f5
SHA1

020b7f19af61f46304dbe4c771172df97c523c1a
SHA256

e623f3f910491cfa266de6e8bee9ece9b3f381a819c749ca5880e72e766467fd
SHA512

7981ca9aa3b059a34b8004124cee361e8c881890e3aa847ab6c5fe6250251d896e67c3ba1814379af7e7185b707f734a9024eef40615b2c50ce774687aeffd45
SSDEEP

192:4BksujPY82gQv5F4at6eMZZ3L93VnjdwCzD38lgHQkutY:w82l4at6eM9FnhwCXsOwJt

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2200	cf4f46e5425d04a33d129abf7ab1f6f5_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2200 wrote to memory of 2584	2200	cf4f46e5425d04a33d129abf7ab1f6f5_JaffaCakes118.exe	28
PID 2200 wrote to memory of 2584	2200	cf4f46e5425d04a33d129abf7ab1f6f5_JaffaCakes118.exe	28
PID 2200 wrote to memory of 2584	2200	cf4f46e5425d04a33d129abf7ab1f6f5_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\cf4f46e5425d04a33d129abf7ab1f6f5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\cf4f46e5425d04a33d129abf7ab1f6f5_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2200
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2200 -s 896
  2⤵
  PID:2584

memory/2200-0-0x0000000000A30000-0x0000000000A38000-memory.dmp

Filesize
32KB

Download
memory/2200-1-0x000007FEF5950000-0x000007FEF633C000-memory.dmp

Filesize
9.9MB

Download
memory/2200-2-0x000000001A690000-0x000000001A710000-memory.dmp

Filesize
512KB

Download
memory/2200-3-0x000007FEF5950000-0x000007FEF633C000-memory.dmp

Filesize
9.9MB

Download
memory/2200-4-0x000000001A690000-0x000000001A710000-memory.dmp

Filesize
512KB

Download