Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
10-05-2024 12:13
Static task
static1
Behavioral task
behavioral1
Sample
2f097ba993b71329492d86b70fceac9a_JaffaCakes118.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2f097ba993b71329492d86b70fceac9a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
2f097ba993b71329492d86b70fceac9a_JaffaCakes118.exe
-
Size
1.0MB
-
MD5
2f097ba993b71329492d86b70fceac9a
-
SHA1
41cb09a1157472693595d7e4f8ce935e6e884c0e
-
SHA256
23d940819a4765afacec85eb0469abfe8875317c489b01e0ebaf26b9a07589a8
-
SHA512
90a07447edd9266da95b31326caea0144060beb69799929935c6de2f5768b71f89a339f3d5c71649cdb44909cffce8bbf008e6f15d50386a7ce4cbe126df1616
-
SSDEEP
24576:ImOaPdk2EQyKRkN9p27IBPcP5q5Hpz8uL:JDaQyKWN57jYu
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1868 2f097ba993b71329492d86b70fceac9a_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeIncBasePriorityPrivilege 1868 2f097ba993b71329492d86b70fceac9a_JaffaCakes118.exe