d29cad4a0eb4dfb20db0c64d6acb85dd994f406691db42e70f88fb6a4f615c3c

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
13/07/2024, 15:47

Target

4255d09a663314a77303c8fad4fdc361_JaffaCakes118.exe
Size

424KB
MD5

4255d09a663314a77303c8fad4fdc361
SHA1

b2281d951af44029001d400e643ca48e92f77520
SHA256

d29cad4a0eb4dfb20db0c64d6acb85dd994f406691db42e70f88fb6a4f615c3c
SHA512

4ec478eb78a2bfb6e6a728cec545143eb023e5447d62b6d53b1f911ddc05b13c9ad7caee216f3c342ea01b9c6963cdb8cec76827918128474bfee436efaab9dd
SSDEEP

6144:77ecA/HSJfX8SOhxjrdc01Yqg81DZW3glhbHX6ewco9CzgNtoCgHJY7+OU/9y:QHE/O911Yqg81DZWQl10RuLCqJYg9y

Score

1^/10

Suspicious use of AdjustPrivilegeToken 3 IoCs

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2100 wrote to memory of 1328	2100	4255d09a663314a77303c8fad4fdc361_JaffaCakes118.exe	28
PID 2100 wrote to memory of 1328	2100	4255d09a663314a77303c8fad4fdc361_JaffaCakes118.exe	28
PID 2100 wrote to memory of 1328	2100	4255d09a663314a77303c8fad4fdc361_JaffaCakes118.exe	28
PID 2100 wrote to memory of 1328	2100	4255d09a663314a77303c8fad4fdc361_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\4255d09a663314a77303c8fad4fdc361_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4255d09a663314a77303c8fad4fdc361_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2100
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 588
  2⤵
  PID:1328

memory/1328-3-0x00000000003B0000-0x00000000003B1000-memory.dmp

Filesize
4KB

Download
memory/2100-0-0x00000000742C1000-0x00000000742C2000-memory.dmp

Filesize
4KB

Download
memory/2100-2-0x00000000742C0000-0x000000007486B000-memory.dmp

Filesize
5.7MB

Download
memory/2100-1-0x00000000742C0000-0x000000007486B000-memory.dmp

Filesize
5.7MB

Download
memory/2100-4-0x00000000742C0000-0x000000007486B000-memory.dmp

Filesize
5.7MB

Download