283487c8b753a97361446dcb4d8a4c4423f681755b6fe7b76482f375fe5b811d

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18/04/2024, 17:03

Target

f867f65086a51bf186b5d990e59c7c15_JaffaCakes118.exe
Size

9KB
MD5

f867f65086a51bf186b5d990e59c7c15
SHA1

1f9e0090c653ce57082adceb90dd3fdf6852900c
SHA256

283487c8b753a97361446dcb4d8a4c4423f681755b6fe7b76482f375fe5b811d
SHA512

b8a9e25f72a4f7c7276a6feeb98a2353c44fe3d5c56f220faacd629bfa473a77855e7f4373bc3adc6d756ebe8c8a18b6214cdaeea97eb4c221d81bda165dfef5
SSDEEP

192:gBksurEXVwVwseMZZ3x93VnjdwCzJ73uwUK:UVwmseMrFnhwCV+wU

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2876	f867f65086a51bf186b5d990e59c7c15_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2876 wrote to memory of 2572	2876	f867f65086a51bf186b5d990e59c7c15_JaffaCakes118.exe	28
PID 2876 wrote to memory of 2572	2876	f867f65086a51bf186b5d990e59c7c15_JaffaCakes118.exe	28
PID 2876 wrote to memory of 2572	2876	f867f65086a51bf186b5d990e59c7c15_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\f867f65086a51bf186b5d990e59c7c15_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f867f65086a51bf186b5d990e59c7c15_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2876
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2876 -s 896
  2⤵
  PID:2572

memory/2876-0-0x0000000000210000-0x0000000000218000-memory.dmp

Filesize
32KB

Download
memory/2876-1-0x000007FEF4E40000-0x000007FEF582C000-memory.dmp

Filesize
9.9MB

Download
memory/2876-2-0x000000001AA10000-0x000000001AA90000-memory.dmp

Filesize
512KB

Download
memory/2876-3-0x000007FEF4E40000-0x000007FEF582C000-memory.dmp

Filesize
9.9MB

Download
memory/2876-4-0x000000001AA10000-0x000000001AA90000-memory.dmp

Filesize
512KB

Download