7927903a00454c387d40cf643c6de853f6111db578df820ccdc564375412fec8

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18/04/2024, 20:45

Target

f8b64b2b4b6a6af42f627124059956e8_JaffaCakes118.exe
Size

9KB
MD5

f8b64b2b4b6a6af42f627124059956e8
SHA1

1ac1ae1f6393fa50ede81cfeffdb6e8e6c0eacb9
SHA256

7927903a00454c387d40cf643c6de853f6111db578df820ccdc564375412fec8
SHA512

cdb2bd8fc63b2655a0c038de11db6953e44d1925c2bc4f00d2fda7ef2bbe474f43b013af3324519089837b930ca8c7662724707dd00e70305d44fc550382e518
SSDEEP

192:2RBksunPY82gQv5F4rNtveMZZ3c93VnjdwCz63mSq:2D82l4JtveMgFnhwCu2S

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1640	f8b64b2b4b6a6af42f627124059956e8_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1640 wrote to memory of 2896	1640	f8b64b2b4b6a6af42f627124059956e8_JaffaCakes118.exe	30
PID 1640 wrote to memory of 2896	1640	f8b64b2b4b6a6af42f627124059956e8_JaffaCakes118.exe	30
PID 1640 wrote to memory of 2896	1640	f8b64b2b4b6a6af42f627124059956e8_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\f8b64b2b4b6a6af42f627124059956e8_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f8b64b2b4b6a6af42f627124059956e8_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1640
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1640 -s 900
  2⤵
  PID:2896

memory/1640-0-0x0000000000310000-0x0000000000318000-memory.dmp

Filesize
32KB

Download
memory/1640-1-0x000007FEF51A0000-0x000007FEF5B8C000-memory.dmp

Filesize
9.9MB

Download
memory/1640-2-0x000000001B2D0000-0x000000001B350000-memory.dmp

Filesize
512KB

Download
memory/1640-3-0x000007FEF51A0000-0x000007FEF5B8C000-memory.dmp

Filesize
9.9MB

Download
memory/1640-4-0x000000001B2D0000-0x000000001B350000-memory.dmp

Filesize
512KB

Download