Analysis
-
max time kernel
149s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
05/07/2024, 13:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe
Resource
win7-20240704-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
2 signatures
150 seconds
General
-
Target
26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe
-
Size
60KB
-
MD5
26ef9692baa451954bed1ef0e0e3aad6
-
SHA1
1d66ca32ea80f9921c6512ba49978423b072cbdb
-
SHA256
13cd539d6bc694760bd63e03683c37660a890526db543ff204f79feb22f4016d
-
SHA512
369c081371da2c3602561386eb8cf61a710912829757c26330148acc1d8ff6b697f3d9aea3824aee264b532b0538ade7d6fd5122499d87b9ea03506f4fe9ffdc
-
SSDEEP
768:O7GREFJ0a+HC4EX1ml5hxklINcJw5QgqsuRi6Sbd0IpVjLM3NTG2qDciAZ2IA9zr:dQKa+V4mlqAj5buU6wdrl2qD55
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: 33 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe 1944 26ef9692baa451954bed1ef0e0e3aad6_JaffaCakes118.exe