068b66cca7797db0b318442d3ef4918bdfcaa89d185816530aefe647b4519062

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 07:40

Target

23dad1a1bcf458035eb29fb4d1f9a058_JaffaCakes118.exe
Size

289KB
MD5

23dad1a1bcf458035eb29fb4d1f9a058
SHA1

2efdb846eef146b4fbb88359bbee06249af18ea4
SHA256

068b66cca7797db0b318442d3ef4918bdfcaa89d185816530aefe647b4519062
SHA512

4d32f54f2a87b75b907ed43275a75df22633e1b5cdffb03c6bc21d9723d307a2480fe3ea140b3f3bdac647740ca77ba9acf29c2dba6f9326af33657b19cfee0d
SSDEEP

6144:8Vgzu7KHXjV8DyJCvok0Tx8WRtvYTBwmeKSupZ:egzu7KHX+DyJCvok+x8WRtvYT+6SupZ

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1804	23dad1a1bcf458035eb29fb4d1f9a058_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\23dad1a1bcf458035eb29fb4d1f9a058_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\23dad1a1bcf458035eb29fb4d1f9a058_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1804