8877ff62123154cacfa4b925aef9660d234d0b2566060b7b2d9f3dc4bf4fff02

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20/04/2024, 12:54

Target

fccef9456994060e6f6048c74fc3376f_JaffaCakes118.exe
Size

9KB
MD5

fccef9456994060e6f6048c74fc3376f
SHA1

9b4e7e6d507339a3d24260694c2ed3ce46f9d787
SHA256

8877ff62123154cacfa4b925aef9660d234d0b2566060b7b2d9f3dc4bf4fff02
SHA512

a13cb21e2b7b8c3732c1c53f45c01ee88f8c16c07ffc59a3144f6c80d2d6161ce730075d66f06292830325e6e5a420929ba28316be8548d0a9f76c6aca76e0a5
SSDEEP

192:hBksuDm6N7oy1LReMZZ3x93VnjdwqzB3LlfE:l4xxReMDFnhwqF7d

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2220	fccef9456994060e6f6048c74fc3376f_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 2288	2220	fccef9456994060e6f6048c74fc3376f_JaffaCakes118.exe	30
PID 2220 wrote to memory of 2288	2220	fccef9456994060e6f6048c74fc3376f_JaffaCakes118.exe	30
PID 2220 wrote to memory of 2288	2220	fccef9456994060e6f6048c74fc3376f_JaffaCakes118.exe	30

C:\Users\Admin\AppData\Local\Temp\fccef9456994060e6f6048c74fc3376f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fccef9456994060e6f6048c74fc3376f_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2220 -s 896
  2⤵
  PID:2288

memory/2220-0-0x0000000000F00000-0x0000000000F08000-memory.dmp

Filesize
32KB

Download
memory/2220-1-0x000007FEF6170000-0x000007FEF6B5C000-memory.dmp

Filesize
9.9MB

Download
memory/2220-2-0x000000001B250000-0x000000001B2D0000-memory.dmp

Filesize
512KB

Download
memory/2220-3-0x000007FEF6170000-0x000007FEF6B5C000-memory.dmp

Filesize
9.9MB

Download
memory/2220-4-0x000000001B250000-0x000000001B2D0000-memory.dmp

Filesize
512KB

Download