0461cb89c3b38350d2b710c6f2ad36ddbf66cb20ce6338a30452016aa655fa7f

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
01-05-2024 17:13

Target

0c5e69cb6b6b1490393afd5d4694caf7_JaffaCakes118.exe
Size

345KB
MD5

0c5e69cb6b6b1490393afd5d4694caf7
SHA1

a3f7cf9b17acfcf0d974fd3b306d921c5ad3fb21
SHA256

0461cb89c3b38350d2b710c6f2ad36ddbf66cb20ce6338a30452016aa655fa7f
SHA512

78c4adb65f35dca8ac083ac6550ca856e8fce92ea0fbad85c7ec0236d7674fd5fb1dee11ed34d50183b72ccdd9f925d2e706c8845612fd95e52f8ff1ecc1e2b2
SSDEEP

6144:ZujgdRI/91IkY5G68DYo1HI4Sdj696ToC9tVDVWQ7YeTBZO0RQ1dF:ZBdRIFAGlDY2SkKr7YeTzBK

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2204	0c5e69cb6b6b1490393afd5d4694caf7_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\0c5e69cb6b6b1490393afd5d4694caf7_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0c5e69cb6b6b1490393afd5d4694caf7_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2204