Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 23:54

General

  • Target

    0fff064713119874e8b288f449bff71d_JaffaCakes118.exe

  • Size

    70KB

  • MD5

    0fff064713119874e8b288f449bff71d

  • SHA1

    7ac02504ca50e3b81fcfb27ba21b8315c1495417

  • SHA256

    c7f964c9814d09b75d268718ba5cdd50e02c343986d1b90ac537da2659cda6a8

  • SHA512

    b2bd8496cbbebd9b5f753f91f03948d390eee140aa8a61bb3d70ff3490a5003f322df89741aa5af3fdebf7fb493890131fe56412ab8f849697f065bfa3bca579

  • SSDEEP

    1536:pv6dT7u1hi1tPyBclM9wHodufJy0OWdOVnBB8OWuXJu6MzP:pv6EqEulMCIdufJyhVnBB8uZazP

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0fff064713119874e8b288f449bff71d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0fff064713119874e8b288f449bff71d_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2064-1-0x0000000000400000-0x0000000000413A00-memory.dmp

    Filesize

    78KB

  • memory/2064-2-0x0000000000400000-0x000000000040D000-memory.dmp

    Filesize

    52KB

  • memory/2064-3-0x00000000004DE000-0x00000000004E9000-memory.dmp

    Filesize

    44KB