Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
21-05-2024 19:42
General
-
Target
64862bd19fed4f0cd26276d9396ea700_JaffaCakes118.exe
-
Size
174KB
-
MD5
64862bd19fed4f0cd26276d9396ea700
-
SHA1
d3629c7758a20385b9d50bb833af9e04917da8cf
-
SHA256
a0eccaf073131c0e380c97afa90cb6a98e5f1ea37b7319433c7e842587b3b269
-
SHA512
9f017c207794445265c78b071af499feced0e8e1d90a8805050199817b6e6506e5100e4e4478f6123e0f698c767299903b03b1e79fd96d1a6a5be8d6eef6bf34
-
SSDEEP
3072:YKNNY4AZpjK37h8DWCuneI8QBNj0xT89uneI8QBNj0xT8b:3NGjZp+3+DWZBNjE8WBNjE8
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\64862bd19fed4f0cd26276d9396ea700_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\64862bd19fed4f0cd26276d9396ea700_JaffaCakes118.exe"1⤵
- Suspicious use of AdjustPrivilegeToken