Analysis
-
max time kernel
35s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
27-06-2024 03:49
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
14936e9908801feebce7196616cec7ef_JaffaCakes118.exe
Resource
win7-20240611-en
2 signatures
150 seconds
General
-
Target
14936e9908801feebce7196616cec7ef_JaffaCakes118.exe
-
Size
640KB
-
MD5
14936e9908801feebce7196616cec7ef
-
SHA1
211299faec8f23dde85def610d71a82ad947dd82
-
SHA256
21f113e52ffb24537afb897e358a20397139f41e984800ea462ce8596bc9b30c
-
SHA512
a605ff20e7bb0cc573133729895697056128afc18b0bc3a15ca8fccad99a6581ddc928398cb200d18111ff1477ae1faee5082452adf7c0fdb21462f7933de3d8
-
SSDEEP
12288:re/P9QSFF2bNk/HEKYM7X489Z5cN6Q3J1KUOuGao0NoEVem50TLM:aX9QyF2bNgEM7487aN6QXusPjGc
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 23 IoCs
Processes:
14936e9908801feebce7196616cec7ef_JaffaCakes118.exedescription pid process Token: SeIncreaseQuotaPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeSecurityPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeTakeOwnershipPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeLoadDriverPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeSystemProfilePrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeSystemtimePrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeProfSingleProcessPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeCreatePagefilePrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeBackupPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeRestorePrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeShutdownPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeDebugPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeSystemEnvironmentPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeChangeNotifyPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeRemoteShutdownPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeUndockPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeManageVolumePrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeImpersonatePrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: SeCreateGlobalPrivilege 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: 33 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: 34 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe Token: 35 2924 14936e9908801feebce7196616cec7ef_JaffaCakes118.exe