16f3a6e13d9e81b2a4dd6c072e431d1f2350e1f0945521bf8ca3f3113786e3f7

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
25-05-2024 00:00

Target

7038ec4ae3827c1bfdf318ff840260bf_JaffaCakes118.exe
Size

289KB
MD5

7038ec4ae3827c1bfdf318ff840260bf
SHA1

95cf513d1ae76079b9ca947395aaaaa1b1b0428b
SHA256

16f3a6e13d9e81b2a4dd6c072e431d1f2350e1f0945521bf8ca3f3113786e3f7
SHA512

8287c9400f8fbd5a4e7562ea60d26bd5ff0694929d1b10577284a68677a113b7775fa5635683ef142ea7e4798547c384c8e00b51872e9027f67cdb5a5f847255
SSDEEP

6144:/Ui0aRHUY1vjapGWCNp/G2H+tv0TBZvnKuJT:ci0aRHUAjapGWCNp/G2H+tv0TPSuJT

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1692	7038ec4ae3827c1bfdf318ff840260bf_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\7038ec4ae3827c1bfdf318ff840260bf_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\7038ec4ae3827c1bfdf318ff840260bf_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1692