1623396d63da11e4053bc8e9fe1fbe2794eb9e521eeaa301f747d999816d4d15

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-06-2024 15:26

Target

9b272dc00888d994edbc6dfba6e5635f_JaffaCakes118.exe
Size

345KB
MD5

9b272dc00888d994edbc6dfba6e5635f
SHA1

f6ae7546dfee238d65c9cb83a19dbca770331a72
SHA256

1623396d63da11e4053bc8e9fe1fbe2794eb9e521eeaa301f747d999816d4d15
SHA512

bc1695da73a5b62121252778dc2034de90ad56a6a417f8cda7de9698ca328d458c8a7a2e74b40fb80afb7339fad493a829d1256369deff9e13e810cb2285883b
SSDEEP

6144:fNZd31PuSc5Y52Dt3VHhI1CztOz+PTdi2ltjv//E87YzTBIxEwGTj:fTd31PuIqt3gCEzoR7YzTKm

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2896	9b272dc00888d994edbc6dfba6e5635f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\9b272dc00888d994edbc6dfba6e5635f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\9b272dc00888d994edbc6dfba6e5635f_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2896