14a0f05efd5b7ee5fb5cae729546c758dccc5011602d5075ddbd8ed2b3e62ae4

Analysis

max time kernel
143s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08/05/2024, 12:54

Target

24ee39fbe8ae4e4fe72ad6244892f6a2_JaffaCakes118.exe
Size

289KB
MD5

24ee39fbe8ae4e4fe72ad6244892f6a2
SHA1

f6993b10d88418d776fb3c525e8fdbb87d6bea41
SHA256

14a0f05efd5b7ee5fb5cae729546c758dccc5011602d5075ddbd8ed2b3e62ae4
SHA512

a0879d2f7c1f01fec8aa73de745f14a4902872917f6380cca7b347809c6e5924ab7b5c6b53cc8deb8167537c3fbda2b78a7dd1a476dc7c34fbba7972b3eb065b
SSDEEP

6144:uUi0aRHUY1vjapGWCNp/G2H+tv0TBZv7KuJa:hi0aRHUAjapGWCNp/G2H+tv0TP+uJa

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2184	24ee39fbe8ae4e4fe72ad6244892f6a2_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\24ee39fbe8ae4e4fe72ad6244892f6a2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\24ee39fbe8ae4e4fe72ad6244892f6a2_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2184

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3160 --field-trial-handle=3240,i,13319578961094268484,16557498665191861597,262144 --variations-seed-version /prefetch:8
1⤵
PID:4688