708079f7a8627637bbcc9383f42eaf24b4f56a6cbefb26d5ef8e370d96c724cb

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20/04/2024, 23:38

Target

fdeab02d139071dc05544a0cd3d47fb9_JaffaCakes118.exe
Size

2.9MB
MD5

fdeab02d139071dc05544a0cd3d47fb9
SHA1

8136817e473eb65a02fcd2f6bb2e556ebe2adbeb
SHA256

708079f7a8627637bbcc9383f42eaf24b4f56a6cbefb26d5ef8e370d96c724cb
SHA512

26c41102662947fbef270eacb1339c5e6cca0f39ff199b8ec87112c161fdfbd84b97367c6f2896450a683c74bf9b4e7a5e5e26b3987d2e7bbd0c62a53d87d447
SSDEEP

49152:NOq92JDzxUM84pvoJdXN0BMOwLloBrug3oJdXN0BMOwLloBrug:7uDFtfQJdXN0B7+sGJdXN0B7+s

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2860	fdeab02d139071dc05544a0cd3d47fb9_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\fdeab02d139071dc05544a0cd3d47fb9_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fdeab02d139071dc05544a0cd3d47fb9_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2860