Analysis
-
max time kernel
13s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 20:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
31eeed03611ba43840fba376fbf7214f_JaffaCakes118.exe
Resource
win7-20240704-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
31eeed03611ba43840fba376fbf7214f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
General
-
Target
31eeed03611ba43840fba376fbf7214f_JaffaCakes118.exe
-
Size
36KB
-
MD5
31eeed03611ba43840fba376fbf7214f
-
SHA1
3b316664b6621ad42a6a00b34b23c8f6e98a5d51
-
SHA256
bd3c3a6bafda9e22f9b09935abb2227c3e54111bddd21ba05ff4ff769e730f5b
-
SHA512
34c0a73cd02e59604a3d13bc4311188e90ca44adad799a2630e2378af33e3a5bbd0ca63850364edbc4db1be8deaa0445a9053405d48fdca6fb2ab6ae552e6cd1
-
SSDEEP
384:YZlCRWtIEFzzorf8LyYt6G1eJFNqJp+q6sNLuuadyata1n4xBu:glXtH/eYjeRqJpb6sNLuuady+
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 560 31eeed03611ba43840fba376fbf7214f_JaffaCakes118.exe Token: SeBackupPrivilege 560 31eeed03611ba43840fba376fbf7214f_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 560 31eeed03611ba43840fba376fbf7214f_JaffaCakes118.exe 560 31eeed03611ba43840fba376fbf7214f_JaffaCakes118.exe