Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
12-05-2024 11:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
39da21706da1958a6786efb0af66ed33_JaffaCakes118.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
39da21706da1958a6786efb0af66ed33_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
39da21706da1958a6786efb0af66ed33_JaffaCakes118.exe
-
Size
663KB
-
MD5
39da21706da1958a6786efb0af66ed33
-
SHA1
817afb4c7d78629bd257fd50c7363add35f3ae67
-
SHA256
76b2b518a02e40e8891c552d8605c76ba109cc8e59ef057fa0a6cb25197aa0d3
-
SHA512
6c290c012b18928cdc4cc9f5c25688b7476903e0a5bea77aedb108c0a9aba63c3f93c4ebc9e29d393f644de5f839d01d0248d9829b0d4c5dbf715e1516854df5
-
SSDEEP
12288:dQCvk8Yc2NU8Fba5hiJRb/AXSqlZeguFa1hQQJQIlzwOhTBbvk:DxYc2my25MJRZXQtQOhT5
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
flow ioc 4 pastebin.com 5 pastebin.com -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1644 39da21706da1958a6786efb0af66ed33_JaffaCakes118.exe