b797b58b0aea83a6f33bc177196af3653c0820197c519dbb23d67da9bebb8ba9

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
21/04/2024, 16:46

Target

ffbb3d00902e050dc689bef662435843_JaffaCakes118.exe
Size

9KB
MD5

ffbb3d00902e050dc689bef662435843
SHA1

1b25f2111003c850078e6b8d101aba4f1551fbd8
SHA256

b797b58b0aea83a6f33bc177196af3653c0820197c519dbb23d67da9bebb8ba9
SHA512

c31b8b455fc3189ab85149245499a05dc3e82898ee9d9a584235623e81fc30fafa7160aab14b7ad6562679eff0e02a515bb8aba181965c85eaed43837aecf4fe
SSDEEP

192:oBksu7EXVwVtfeMZZ3c93VnjdwCzI3ihRs:cVw/feM4FnhwCEqR

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2324	ffbb3d00902e050dc689bef662435843_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2324 wrote to memory of 2528	2324	ffbb3d00902e050dc689bef662435843_JaffaCakes118.exe	28
PID 2324 wrote to memory of 2528	2324	ffbb3d00902e050dc689bef662435843_JaffaCakes118.exe	28
PID 2324 wrote to memory of 2528	2324	ffbb3d00902e050dc689bef662435843_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\ffbb3d00902e050dc689bef662435843_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\ffbb3d00902e050dc689bef662435843_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2324
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2324 -s 896
  2⤵
  PID:2528

memory/2324-0-0x0000000000B90000-0x0000000000B98000-memory.dmp

Filesize
32KB

Download
memory/2324-1-0x000007FEF5AA0000-0x000007FEF648C000-memory.dmp

Filesize
9.9MB

Download
memory/2324-2-0x000000001B100000-0x000000001B180000-memory.dmp

Filesize
512KB

Download
memory/2324-3-0x000007FEF5AA0000-0x000007FEF648C000-memory.dmp

Filesize
9.9MB

Download
memory/2324-4-0x000000001B100000-0x000000001B180000-memory.dmp

Filesize
512KB

Download