21a65b78cc97c8e6b231c2d7ee3201575667da0b4a3901b0acce39a7ba8f5da1

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
04-05-2024 15:43

Target

13641288522962231aa586a830e9524f_JaffaCakes118.exe
Size

345KB
MD5

13641288522962231aa586a830e9524f
SHA1

2d2bd34448967e78d226caace3860e8d72d52b80
SHA256

21a65b78cc97c8e6b231c2d7ee3201575667da0b4a3901b0acce39a7ba8f5da1
SHA512

77a36fd7cec3638e1dc1328ee3550553b8e122b87110955309831718dd05fe050c16718c36f5a38a90a299e543b22644313f4811d9ed1f8a54a5684f778a8cbd
SSDEEP

6144:dujgdRI/91IkY5G68DYo1HI4Sdj696ToC9tVDVWQ7YeTBZO0RQydtAn:dBdRIFAGlDY2SkKr7YeTzBan

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2864	13641288522962231aa586a830e9524f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\13641288522962231aa586a830e9524f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\13641288522962231aa586a830e9524f_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2864