Analysis
- max time kernel
140s - max time network
52s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
12/06/2024, 23:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe
Resource
win7-20240611-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
- Target a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe
- Size 526KB
- Sample240612-243mgavaqb
- SHA256 7c00ebd19483fe4fce829b058cb3ad4088d0dc8239c106c4c2b9f3257ea4555c
- MD5 a2db49495fdca2d7a5a5f1d32659cdb6
- SHA1 952900ce1eb1d49448801e40d427c709e9206f68
- SHA512 debe04ff8e65bb6fef417e71130c9613ecc08b250a091188271e5e7502894badd191a9dd84f8878ff9fa9f4f48b864c4160a0d4e5cf5260e921c4b5d7b59e7b6
- SSDEEP 12288:BGnop9ErYWKVRQ3x+ws/yiJo5r7FhYokK2UEN:giWYWKvQ3swsvsr/YokKaN
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 10 IoCs
description pid Process Token: 33 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe Token: 33 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe Token: 33 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe Token: 33 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe Token: 33 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe 1144 a2db49495fdca2d7a5a5f1d32659cdb6_JaffaCakes118.exe