1dce7153403d12c56ed3dd851c0119156f9f1e3bfa4ecc5e70c2b7a2edf01004

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
08-07-2024 15:21

Target

2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe
Size

7KB
MD5

2cd431abd219765f5e0a95f15b3aa766
SHA1

72e6e33e3d6d95f940f59720b212036fd3c4595f
SHA256

1dce7153403d12c56ed3dd851c0119156f9f1e3bfa4ecc5e70c2b7a2edf01004
SHA512

a67c8c0d7a103947333ec64ec2b26794d008bcb97a8452d458adad44c61f27f5f7634f5d73c36952a87cf268a709289782a93070242bc329d16637c06826bac9
SSDEEP

96:o2cpy/mSseVqiCVvttZPvMa/BcgZCGElAhhWQJ2JoaOM4HuEcXlJmj5dCjZ:o2coDse8RvzZPPZf5EosJoaOHHcXliQ

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2948	2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2948	2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2948 wrote to memory of 1196	2948	2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe	21
PID 2948 wrote to memory of 1196	2948	2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe	21
PID 2948 wrote to memory of 1196	2948	2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe	21
PID 2948 wrote to memory of 1196	2948	2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe	21
PID 2948 wrote to memory of 1196	2948	2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe	21
PID 2948 wrote to memory of 1196	2948	2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe	21
PID 2948 wrote to memory of 1196	2948	2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe	21
PID 2948 wrote to memory of 1196	2948	2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe	21
PID 2948 wrote to memory of 1196	2948	2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe	21
PID 2948 wrote to memory of 1196	2948	2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe	21
PID 2948 wrote to memory of 1196	2948	2cd431abd219765f5e0a95f15b3aa766_JaffaCakes118.exe	21

memory/1196-10-0x0000000002980000-0x0000000002981000-memory.dmp

Filesize
4KB

Download
memory/1196-0-0x00000000025A0000-0x00000000025A1000-memory.dmp

Filesize
4KB

Download