1c94ec559219a16d422d8a75bd6e6166f81fb4e7fdfecae23585e7c561720b30

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/04/2024, 22:01

Target

f2069c35c1ac0b0059a4eabe7185a607_JaffaCakes118.exe
Size

9KB
MD5

f2069c35c1ac0b0059a4eabe7185a607
SHA1

1f7b57f7ac06f551adefa1f2a46dbd46cead843d
SHA256

1c94ec559219a16d422d8a75bd6e6166f81fb4e7fdfecae23585e7c561720b30
SHA512

23bb8b15d378cda8f6ced6feca3439315c2f617366d60f994ae94634bce96301cf619f6971f2822f69747f1014f2f91d00bac417a97d29ff1ee5c395fb8daefb
SSDEEP

192:HBksufPY82gQv5F4V8tGeMZZ3r93VnjdwCzx3hZxqBG:582l4V8tGeMtFnhwCVRLI

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3000	f2069c35c1ac0b0059a4eabe7185a607_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3000 wrote to memory of 2592	3000	f2069c35c1ac0b0059a4eabe7185a607_JaffaCakes118.exe	28
PID 3000 wrote to memory of 2592	3000	f2069c35c1ac0b0059a4eabe7185a607_JaffaCakes118.exe	28
PID 3000 wrote to memory of 2592	3000	f2069c35c1ac0b0059a4eabe7185a607_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\f2069c35c1ac0b0059a4eabe7185a607_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f2069c35c1ac0b0059a4eabe7185a607_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3000
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3000 -s 896
  2⤵
  PID:2592

memory/3000-0-0x0000000000020000-0x0000000000028000-memory.dmp

Filesize
32KB

Download
memory/3000-1-0x000007FEF5A70000-0x000007FEF645C000-memory.dmp

Filesize
9.9MB

Download
memory/3000-2-0x000000001A570000-0x000000001A5F0000-memory.dmp

Filesize
512KB

Download
memory/3000-3-0x000007FEF5A70000-0x000007FEF645C000-memory.dmp

Filesize
9.9MB

Download
memory/3000-4-0x000000001A570000-0x000000001A5F0000-memory.dmp

Filesize
512KB

Download