8cb31e331906eca969fe5d59d3dd4fd0c05735ac3c8a1a978902528d822aa81e

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16-04-2024 07:23

Target

f2fc36f03023685157c66e72ce3e93a2_JaffaCakes118.exe
Size

9KB
MD5

f2fc36f03023685157c66e72ce3e93a2
SHA1

d46e2f3da85c530a8196303af169b03615deb380
SHA256

8cb31e331906eca969fe5d59d3dd4fd0c05735ac3c8a1a978902528d822aa81e
SHA512

f51006c6bff3ff46501629dc356c935b2670101724dd8a8724ed4d6d0514f5a1af45213e09481eebc708ff1175cb35a6327607b679ade93518e1fe605ccbae30
SSDEEP

96:1BuzsC1XnbkX23g+NQcoJeW8byZZ3YG93VyWCYdwqztamQoPLxxzNt:1BksuXzHNQLJeMZZ3X93Vnjdwqzt3tT

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1980	f2fc36f03023685157c66e72ce3e93a2_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1980 wrote to memory of 2812	1980	f2fc36f03023685157c66e72ce3e93a2_JaffaCakes118.exe	28
PID 1980 wrote to memory of 2812	1980	f2fc36f03023685157c66e72ce3e93a2_JaffaCakes118.exe	28
PID 1980 wrote to memory of 2812	1980	f2fc36f03023685157c66e72ce3e93a2_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\f2fc36f03023685157c66e72ce3e93a2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f2fc36f03023685157c66e72ce3e93a2_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1980
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1980 -s 892
  2⤵
  PID:2812

memory/1980-0-0x0000000000050000-0x0000000000058000-memory.dmp

Filesize
32KB

Download
memory/1980-1-0x000007FEF5E60000-0x000007FEF684C000-memory.dmp

Filesize
9.9MB

Download
memory/1980-2-0x000000001B3E0000-0x000000001B460000-memory.dmp

Filesize
512KB

Download
memory/1980-3-0x000007FEF5E60000-0x000007FEF684C000-memory.dmp

Filesize
9.9MB

Download
memory/1980-4-0x000000001B3E0000-0x000000001B460000-memory.dmp

Filesize
512KB

Download