047d4af67ecae7e9052b90e10b40d9cbc39d2631f32c3b081028d48c04e16eed

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
10/05/2024, 04:27

Target

2d55f997658d6b5c87c918a39bf9ebea_JaffaCakes118.exe
Size

289KB
MD5

2d55f997658d6b5c87c918a39bf9ebea
SHA1

784b0f71d7cbbd1bb91abaa86615f4e8f10931b1
SHA256

047d4af67ecae7e9052b90e10b40d9cbc39d2631f32c3b081028d48c04e16eed
SHA512

4016100556fef696326ee194840c4fdc7aedd92fdb161a24dea09d8344e2bbc44eea6b9f16ffb217bce9b9ff2714d778206fbe1c5efb8ecd77dc2c20b36c3d2c
SSDEEP

6144:gUi0aRHUY1vjapGWCNp/G2H+tv0TBZvRKuJi:Li0aRHUAjapGWCNp/G2H+tv0TPwuJi

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2908	2d55f997658d6b5c87c918a39bf9ebea_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\2d55f997658d6b5c87c918a39bf9ebea_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2d55f997658d6b5c87c918a39bf9ebea_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2908