102cc92cca66e197c38e9a2d9929741e425888c96e6e531d34a153363ed5b180

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
17/06/2024, 05:47

Target

b70b47fb4ae2d40277d4c5c6388156e8_JaffaCakes118.exe
Size

289KB
MD5

b70b47fb4ae2d40277d4c5c6388156e8
SHA1

f23831fdb35bd29e53ad6bf81d451462dd0d729c
SHA256

102cc92cca66e197c38e9a2d9929741e425888c96e6e531d34a153363ed5b180
SHA512

87c642127d38694e73790111f8791fc8c7c9389d55c7a8c3254cb169b1ed2a465cf9c407c71d043d6ddd40c9534b9fa19d4ba6acde42efdbba249044d4cf8f1b
SSDEEP

6144:zUi0aRHUY1vjapGWCNp/G2H+tv0TBZvMKuJKq:Ai0aRHUAjapGWCNp/G2H+tv0TPZuJKq

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2192	b70b47fb4ae2d40277d4c5c6388156e8_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\b70b47fb4ae2d40277d4c5c6388156e8_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\b70b47fb4ae2d40277d4c5c6388156e8_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2192