Analysis
-
max time kernel
150s -
max time network
50s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
01-05-2024 12:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe
Resource
win7-20231129-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe
-
Size
265KB
-
MD5
0bcf5ee01354f27428c28929f23b929e
-
SHA1
fbf989ccc070839b1a20103e7618250787ea78f7
-
SHA256
8d6c881b2986808706764e5f1e55bc198b9400eda93d6d451712e707bb1e267c
-
SHA512
80b94688f035a9afd3e6b971a6ba0801c1ad68aa6495df2334ffa4e887f3ef7a0cfaca1629cbebb6b06102a29327459b8f3d5ddb248eb10162231236b3ee3afa
-
SSDEEP
6144:/l76KGda+JjEZYkkOcV6NewXk5WCixcJLcApl:/hOtBVOcV6wwXk5Dixq
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
Processes:
0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exepid process 4396 0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe 4396 0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe 4396 0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe 4396 0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe 4396 0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe 4396 0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe 4396 0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe 4396 0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exedescription pid process Token: SeDebugPrivilege 4396 0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe