Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
20/05/2024, 13:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5f6babdbc89a9297633cd4b2a37960c6_JaffaCakes118.exe
Resource
win7-20240220-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
5f6babdbc89a9297633cd4b2a37960c6_JaffaCakes118.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
5f6babdbc89a9297633cd4b2a37960c6_JaffaCakes118.exe
-
Size
1.7MB
-
MD5
5f6babdbc89a9297633cd4b2a37960c6
-
SHA1
9f2d37412689388894d8a3aef5b9e0e67ed22dcf
-
SHA256
8519c7713e2631c2c2d2345d4e68274e514e3f6c1d255c02ab8fa2393eef0631
-
SHA512
a9e2d04bb162d521e07d4e7baeb3bfecc19338876d3443c5eaf5e6c651abe2d8c7268ae7831982cca89e09add65154b322d2318e106a61dc1c498dea8dd05327
-
SSDEEP
24576:fFs5NqURLl4GM/olfe4Gs6UfSslPYYZG17ZJgcufG96KWh0Et9TGDGXp5DC8qcU5:fF4LV9TGDc73rUzTJE8Jks
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2192 5f6babdbc89a9297633cd4b2a37960c6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 2192 5f6babdbc89a9297633cd4b2a37960c6_JaffaCakes118.exe