269976435bf619ca3742e8cd4889e6dff24c4bd405ae7c6ed0cdc5760e8da40a

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
17/05/2024, 08:23

Target

4f2657c5abb421b5ab1419e81ab81dda_JaffaCakes118.exe
Size

289KB
MD5

4f2657c5abb421b5ab1419e81ab81dda
SHA1

4c7023d20dd03978fab98e19106f4fcd2fe05156
SHA256

269976435bf619ca3742e8cd4889e6dff24c4bd405ae7c6ed0cdc5760e8da40a
SHA512

96b6ff4aaba786882852d0cd3299ec2a410c41351010a08f737eb5f67b0c222c2ae42a7085705b8015066072b84235d5ea0522bd381cd0606f6fc0ceae16d709
SSDEEP

6144:qVgzu7KHXjV8DyJCvok0Tx8WRtvYTBwmrKSg:sgzu7KHX+DyJCvok+x8WRtvYT+rSg

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1044	4f2657c5abb421b5ab1419e81ab81dda_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\4f2657c5abb421b5ab1419e81ab81dda_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4f2657c5abb421b5ab1419e81ab81dda_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1044