7056c1f58eace0959f498ef740483810ea22d7ee1a2b7f3b24d33015c68b8edb

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 09:38

Target

493b6abddd628ebdf45d7b6f1524c0a5_JaffaCakes118.exe
Size

31KB
MD5

493b6abddd628ebdf45d7b6f1524c0a5
SHA1

aeb470c739f12b5bf6ae54a91841157dcb354eb0
SHA256

7056c1f58eace0959f498ef740483810ea22d7ee1a2b7f3b24d33015c68b8edb
SHA512

fe34a5287b58a348c84e51460de2789e31904e8f52c18acdbbc7909ead626bc7bf85188daac42baf846008a99d7798cf5b93d5f8ce042db102db117bd90a4ffa
SSDEEP

384:7jwXr2PDfkdc+1/t3r2cUgZWfZtUV7LCwfvhQ4XQWqk51M3BDGXk07u3M1ob+1xC:gteiUgZWfZkLdP1k6Xk8cMSmQiM

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2304	493b6abddd628ebdf45d7b6f1524c0a5_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\493b6abddd628ebdf45d7b6f1524c0a5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\493b6abddd628ebdf45d7b6f1524c0a5_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2304