7b0abb84fd7547ceed83b3db810acbf6d43da64dfd65620f4006440fa8f0de87

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18/04/2024, 15:35

Target

f84ecf2515fc57e68ca5f44e6f81bdfa_JaffaCakes118.exe
Size

9KB
MD5

f84ecf2515fc57e68ca5f44e6f81bdfa
SHA1

09c69bbd5cb1e8e0866ea6a31c93a3f04d627992
SHA256

7b0abb84fd7547ceed83b3db810acbf6d43da64dfd65620f4006440fa8f0de87
SHA512

eac0da85ed2f77717a2a9625f435a87b686d4ae5379ce392e942ed8412d52902baec3cdffd05530fa1e99aa44462ba279bea91b53924233a3091be5c83b6ed29
SSDEEP

192:bBksuzPY82gQv5F4Qt6eMZZ3f93VnjdwCzk3hxZV:p82l4Qt6eMpFnhwCQLZ

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2784	f84ecf2515fc57e68ca5f44e6f81bdfa_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2784 wrote to memory of 2612	2784	f84ecf2515fc57e68ca5f44e6f81bdfa_JaffaCakes118.exe	28
PID 2784 wrote to memory of 2612	2784	f84ecf2515fc57e68ca5f44e6f81bdfa_JaffaCakes118.exe	28
PID 2784 wrote to memory of 2612	2784	f84ecf2515fc57e68ca5f44e6f81bdfa_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\f84ecf2515fc57e68ca5f44e6f81bdfa_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f84ecf2515fc57e68ca5f44e6f81bdfa_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2784
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2784 -s 892
  2⤵
  PID:2612

memory/2784-0-0x00000000013C0000-0x00000000013C8000-memory.dmp

Filesize
32KB

Download
memory/2784-1-0x000007FEF5660000-0x000007FEF604C000-memory.dmp

Filesize
9.9MB

Download
memory/2784-2-0x000000001AFE0000-0x000000001B060000-memory.dmp

Filesize
512KB

Download
memory/2784-3-0x000007FEF5660000-0x000007FEF604C000-memory.dmp

Filesize
9.9MB

Download
memory/2784-4-0x000000001AFE0000-0x000000001B060000-memory.dmp

Filesize
512KB

Download