Analysis
-
max time kernel
125s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
28/06/2024, 10:04
General
-
Target
19ba029e269a7f05f072b916ebf4dbca_JaffaCakes118.exe
-
Size
91KB
-
MD5
19ba029e269a7f05f072b916ebf4dbca
-
SHA1
462f8d078097a0b2c603f819e5862213843ba701
-
SHA256
b8bb4cb1d27b63e97390c781693939ca4a44c89ed1f19c8935bc45f1eda0f47b
-
SHA512
bd46454b3d12083142fbfdc7af6c90f01f4fd7833dfdd806d7faeccff79e1fa71f03b40f718cfdace3500e98bb1d797a1ce585d918f02979ebdfcf999858b9fb
-
SSDEEP
1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFo:NwtRonyypexoiNtxYGo
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\19ba029e269a7f05f072b916ebf4dbca_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\19ba029e269a7f05f072b916ebf4dbca_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4396,i,7012731823941922179,12386606396608877869,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:81⤵