Analysis
- max time kernel
149s - max time network
100s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
31/05/2024, 03:40
Behavioral task
behavioral1
Sample
85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe
Resource
win7-20240419-en
windows7-x64
2 signatures
150 seconds
General
- Target 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe
- Size 23KB
- Sample240531-d8frhafa29
- SHA256 e0fa1814c52a0e5de0c90257d168e46ce1a769e38d7594ece16d1fa9d383b7fe
- MD5 85dfb23f26cd0c7ac2060839bf11af34
- SHA1 1e1baeaf643ea96da539b3d65d19987dedfe28b2
- SHA512 e9d0e0613e63d4c1aca77599348424d5ac224586ba69af6ffdd156a2a72a610cbcd8808cf7fd888ec2587a6700f9a093f52175886107d89bf7bf69ca855a3c8a
- SSDEEP 384:rMwKyOkB+RLDKpyly2F05PJo6zgVcW9GA/ZmRvR6JZlbw8hqIusZzZKhU:j/G7NFyRpcnuJU
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: 33 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3116 85dfb23f26cd0c7ac2060839bf11af34_JaffaCakes118.exe