211db43aebc3773bab86f5ad734dde7e99d1a56b32ac554a7a9b18703afb1bcf

Analysis

max time kernel
140s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
02/05/2024, 04:06

Target

0d7243c3b885286634f480cddbce9e19_JaffaCakes118.exe
Size

289KB
MD5

0d7243c3b885286634f480cddbce9e19
SHA1

1d97e19d884cd74987f90814993d2fad16aebf34
SHA256

211db43aebc3773bab86f5ad734dde7e99d1a56b32ac554a7a9b18703afb1bcf
SHA512

56e192b4eac5d9348866c03d352492e201a45003084ff8189918179b80fe3888fa616fcd288bc561b3b3d3a5543643f101862289059f6cf33173e135702c8d35
SSDEEP

6144:gUi0aRHUY1vjapGWCNp/G2H+tv0TBZvtKuJ1:Li0aRHUAjapGWCNp/G2H+tv0TP0uJ1

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3028	0d7243c3b885286634f480cddbce9e19_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\0d7243c3b885286634f480cddbce9e19_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0d7243c3b885286634f480cddbce9e19_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3028