056647dcd82ae9c7025b0940f751b462979f4ce4cae07bb916696802211be3ae

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
15/05/2024, 12:56

Target

4645e99213f6b654ef9babc5122a2e5a_JaffaCakes118.exe
Size

289KB
MD5

4645e99213f6b654ef9babc5122a2e5a
SHA1

276b5489cec4b04d5ad9d6740bef9c1334223284
SHA256

056647dcd82ae9c7025b0940f751b462979f4ce4cae07bb916696802211be3ae
SHA512

69b8ae8a2f823050e1e0d3d79d37aca3ea5b5a0717e0ec971212cac53fd730ed72d1345a3e4c25ae462fd378cb52d2d4ed5c3bff288f7aa7cde92311ab8415ad
SSDEEP

6144:yVgzu7KHXjV8DyJCvok0Tx8WRtvYTBwmJKSq:0gzu7KHX+DyJCvok+x8WRtvYT+NSq

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1232	4645e99213f6b654ef9babc5122a2e5a_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\4645e99213f6b654ef9babc5122a2e5a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4645e99213f6b654ef9babc5122a2e5a_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1232