93702347244cd77f494df546c486748300eed989079ee0ec43116175d932e177

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
25/06/2024, 03:54

Target

0c65b81b95d7f0b83513004917f0daf4_JaffaCakes118.exe
Size

41KB
MD5

0c65b81b95d7f0b83513004917f0daf4
SHA1

6a14db4374328c17514c6f0bfb953bb7fc5c6637
SHA256

93702347244cd77f494df546c486748300eed989079ee0ec43116175d932e177
SHA512

d8fc47d646adde0c44c95c4cdbd425e6545f3493be75b4c2e61eed8c80e3811bd8d1d8e1e80d905ea45b1838575bfa9f848a3bf2f63cb9e445c5b11b4733b3d0
SSDEEP

768:L9sYd6+D+OSs5R55hwc+6dlRB0RaEXj/3udBnrvO6fVYlkcMn:Lv6B0Pv6aC/3YyEyW

Score

1^/10

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
480	Process not Found

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeLoadDriverPrivilege	2296	0c65b81b95d7f0b83513004917f0daf4_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\0c65b81b95d7f0b83513004917f0daf4_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0c65b81b95d7f0b83513004917f0daf4_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2296