Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/06/2024, 10:04
General
-
Target
19ba029e269a7f05f072b916ebf4dbca_JaffaCakes118.exe
-
Size
91KB
-
MD5
19ba029e269a7f05f072b916ebf4dbca
-
SHA1
462f8d078097a0b2c603f819e5862213843ba701
-
SHA256
b8bb4cb1d27b63e97390c781693939ca4a44c89ed1f19c8935bc45f1eda0f47b
-
SHA512
bd46454b3d12083142fbfdc7af6c90f01f4fd7833dfdd806d7faeccff79e1fa71f03b40f718cfdace3500e98bb1d797a1ce585d918f02979ebdfcf999858b9fb
-
SSDEEP
1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFo:NwtRonyypexoiNtxYGo
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\19ba029e269a7f05f072b916ebf4dbca_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\19ba029e269a7f05f072b916ebf4dbca_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken