Analysis
-
max time kernel
131s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
25/06/2024, 05:46
General
-
Target
0cdf9944a09289e69a041f03955b60aa_JaffaCakes118.exe
-
Size
91KB
-
MD5
0cdf9944a09289e69a041f03955b60aa
-
SHA1
0175d46c006905d3b7c54536419260ecf33a9905
-
SHA256
b3de5ae37d914a7a1691529af1185c0f4af743066cfd2ef9ab3fb8f3287eae17
-
SHA512
c98f3ae282d1df643297bd45bdff37bb1e13264caef920c0a11669201ad1ddd16c38c66712d1057f05fc5accbcabfcb34010f2d2d32f4103be0f43ce8215ac3b
-
SSDEEP
1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEF6:NwtRonyypexoiNtxYG6
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0cdf9944a09289e69a041f03955b60aa_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0cdf9944a09289e69a041f03955b60aa_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4200,i,6166776566165096562,4582328833313060853,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:81⤵