8058881a63aaad501b70875ffc5de4258a155e80a27ab2a463bc258f04ad68cc

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12-05-2024 01:16

Target

377c713a9f3ff9ebca0c11824881901c_JaffaCakes118.exe
Size

289KB
MD5

377c713a9f3ff9ebca0c11824881901c
SHA1

aec0d725408ba6c1726a6707d20fa3424ccdc260
SHA256

8058881a63aaad501b70875ffc5de4258a155e80a27ab2a463bc258f04ad68cc
SHA512

9ff1fd24d1a3354226fb3e0ec9fedab70ea7ebaecd83b5792385781c69a291163121d288576eb35190fd0ebe77877c1604fecc5163986b7250f2a746d527b1b4
SSDEEP

6144:WVgzu7KHXjV8DyJCvok0Tx8WRtvYTBwmrKSDg:wgzu7KHX+DyJCvok+x8WRtvYT+rSM

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2164	377c713a9f3ff9ebca0c11824881901c_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\377c713a9f3ff9ebca0c11824881901c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\377c713a9f3ff9ebca0c11824881901c_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2164