228c93952fa35ea3842fa3f48975c58b5b90e81056824093d8bf819019e876ca

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 20:19

Target

21916613fda48040cddf8eee86de250f_JaffaCakes118.exe
Size

289KB
MD5

21916613fda48040cddf8eee86de250f
SHA1

62cb5ff969cbab6887034dbe97fdee42a947f8e4
SHA256

228c93952fa35ea3842fa3f48975c58b5b90e81056824093d8bf819019e876ca
SHA512

a0f6fc9b224a945d21782a7c40ee7a9c5e1da086024fa5bb79f22b03dc2d4ddfa22eeaf24b9d1113fa6f62a0297ba784688869c0ae0a2a0fcaac1d7393f5b609
SSDEEP

6144:yUi0aRHUY1vjapGWCNp/G2H+tv0TBZv8KuJ0:Vi0aRHUAjapGWCNp/G2H+tv0TPZuJ0

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2888	21916613fda48040cddf8eee86de250f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\21916613fda48040cddf8eee86de250f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\21916613fda48040cddf8eee86de250f_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2888