1360005db9e3c04881c45d5e60db07ce989d099863e7a26f7aff0a51852d8041

Analysis

max time kernel
54s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
26/04/2024, 13:41

Target

00e486b63035e4cbfb1977708d0e6efe_JaffaCakes118.exe
Size

289KB
MD5

00e486b63035e4cbfb1977708d0e6efe
SHA1

660dac8f86c99593112e710e96bfc0795cce2f5e
SHA256

1360005db9e3c04881c45d5e60db07ce989d099863e7a26f7aff0a51852d8041
SHA512

1ef621eaeff0137bff3c2664a742342dc05cddc509d3b7f8bb70ffc9c49dcc3e5dfb57a9dc937957dfa8b371212aea0806e030c400920460b01bbd2b11352f7b
SSDEEP

6144:dUi0aRHUY1vjapGWCNp/G2H+tv0TBZv3KuJzY:Ci0aRHUAjapGWCNp/G2H+tv0TPSuJ8

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4948	00e486b63035e4cbfb1977708d0e6efe_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\00e486b63035e4cbfb1977708d0e6efe_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\00e486b63035e4cbfb1977708d0e6efe_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4948