9ea468df311421023f3a274886c5828e4b972438c92823bb6ecc4fe31ada4b43

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
17-04-2024 18:47

Target

f66f0ed5fec8f8f59c7c8e663c0bfd10_JaffaCakes118.exe
Size

9KB
MD5

f66f0ed5fec8f8f59c7c8e663c0bfd10
SHA1

8dadca27e18d97bd3bd93725366fc9ff664253da
SHA256

9ea468df311421023f3a274886c5828e4b972438c92823bb6ecc4fe31ada4b43
SHA512

5043fc1a64b229298306f92340f1c3a4607a2db12ba5dcf7c7f5882bceb6711af2a60526fd01787323fa5eab81914cb0f8da5271abbd39228e353ddf2f394693
SSDEEP

192:bBksu39MuIr/LeMZZ3v93Vnjdwqzgu3tKK:IlG/LeMJFnhwq0uk

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2332	f66f0ed5fec8f8f59c7c8e663c0bfd10_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2332 wrote to memory of 2304	2332	f66f0ed5fec8f8f59c7c8e663c0bfd10_JaffaCakes118.exe	28
PID 2332 wrote to memory of 2304	2332	f66f0ed5fec8f8f59c7c8e663c0bfd10_JaffaCakes118.exe	28
PID 2332 wrote to memory of 2304	2332	f66f0ed5fec8f8f59c7c8e663c0bfd10_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\f66f0ed5fec8f8f59c7c8e663c0bfd10_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f66f0ed5fec8f8f59c7c8e663c0bfd10_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2332
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2332 -s 896
  2⤵
  PID:2304

memory/2332-0-0x0000000000AB0000-0x0000000000AB8000-memory.dmp

Filesize
32KB

Download
memory/2332-1-0x000007FEF5BA0000-0x000007FEF658C000-memory.dmp

Filesize
9.9MB

Download
memory/2332-2-0x0000000000600000-0x0000000000680000-memory.dmp

Filesize
512KB

Download
memory/2332-3-0x000007FEF5BA0000-0x000007FEF658C000-memory.dmp

Filesize
9.9MB

Download
memory/2332-4-0x0000000000600000-0x0000000000680000-memory.dmp

Filesize
512KB

Download