Analysis
-
max time kernel
93s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
09/07/2024, 05:59
General
-
Target
2f399d4fe6b9517d4ae614ce0182663b_JaffaCakes118.exe
-
Size
91KB
-
MD5
2f399d4fe6b9517d4ae614ce0182663b
-
SHA1
c3afb71961d9d0a9af08fd7ae5f662c36aa18365
-
SHA256
dc14b724f4e5a88a823993f4afcabbe083b96a6c171ec05de0528fabdce19505
-
SHA512
5923871c2c6b5694ddd5ef0cc3ca1428343a3d7956ca89dfc8a8cc247d821dfb74134216cfd17b7e40cc8f886db892f1deb05e688f62b1fba3f2408d905c289a
-
SSDEEP
1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEF9fXOL:NwtRonyypexoiNtxYG9fXOL
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2f399d4fe6b9517d4ae614ce0182663b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2f399d4fe6b9517d4ae614ce0182663b_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken