126bcc227a0965d2b5f9d90889f671bed03cf93e7a065e11b80837acfe96b5e0

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22/05/2024, 03:53

Target

65ea7fd6128312db9afd362754827563_JaffaCakes118.exe
Size

289KB
MD5

65ea7fd6128312db9afd362754827563
SHA1

6239bf90ffcac7a61f0a9a545ca7b3c16b7fd02d
SHA256

126bcc227a0965d2b5f9d90889f671bed03cf93e7a065e11b80837acfe96b5e0
SHA512

b21e1cdf943490be84aad66677bcfa53487f1d1f71951c3c18552bb1344bc906fe39a61226c7c090a0593ee96584d0a3b337c8210e7c910202a3ab5f637606d6
SSDEEP

6144:gUi0aRHUY1vjapGWCNp/G2H+tv0TBZvtKuJs:Li0aRHUAjapGWCNp/G2H+tv0TPEuJs

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1916	65ea7fd6128312db9afd362754827563_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\65ea7fd6128312db9afd362754827563_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\65ea7fd6128312db9afd362754827563_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1916