342c56000c26f37614c19e6c79317e92fd3ce3d90bb6847a4165d6a59db45597

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
20/06/2024, 04:18

Target

02bf45e2a9665020d7fd4db22817e34f_JaffaCakes118.exe
Size

68KB
MD5

02bf45e2a9665020d7fd4db22817e34f
SHA1

afce07faca255cff44076f8e1e236f0537ddf003
SHA256

342c56000c26f37614c19e6c79317e92fd3ce3d90bb6847a4165d6a59db45597
SHA512

c7d4e77eb356a35fa96e8ab5ae17e56a6ecf023eea6a969cfd8d5e8f9a6a0767455558fa809d50251aa53e5344db297ef6d002ee8a2c5ff1e3a6cd80ca938502
SSDEEP

1536:rJJa6iUbQsc0QOKzFieMMB8t9zQisXXmOGXBLShSO:DINceh2NbsHsS9

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeSystemtimePrivilege	2208	02bf45e2a9665020d7fd4db22817e34f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\02bf45e2a9665020d7fd4db22817e34f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\02bf45e2a9665020d7fd4db22817e34f_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2208