Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
03-07-2024 23:23
General
-
Target
23d3b71ce3c262e272b4e08d1b3a1566_JaffaCakes118.exe
-
Size
91KB
-
MD5
23d3b71ce3c262e272b4e08d1b3a1566
-
SHA1
2f6caf02006a517eb82c252be466afa8b72d135e
-
SHA256
5589c66d41c92eea947f83beb3a1579868b721f0aa9a9f53f1c1b56c0a0b35fe
-
SHA512
0dacb94ec8115726493195d286889abd3145583d3ebcc7c3d6e5e9378ea70915ba46e7ddfef84730ed41d6e5ecc6e9cc92c3fc2c70212c3021fac187a4478724
-
SSDEEP
1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEF:NwtRonyypexoiNtxYG
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\23d3b71ce3c262e272b4e08d1b3a1566_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\23d3b71ce3c262e272b4e08d1b3a1566_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken