Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
19-07-2024 17:24
General
-
Target
5ced124c8d13b01e4a7da8f3d8615f77_JaffaCakes118.exe
-
Size
91KB
-
MD5
5ced124c8d13b01e4a7da8f3d8615f77
-
SHA1
c1c50bded6bd72d8a65a258c0f8bbdb4009f25d2
-
SHA256
31df7d0f2d4c69376bba287d5c5cc837d0c2d47fd29eb6f1b82cb6d5f93701fb
-
SHA512
0ca08056e307f4e1a27052c14da0eea38b37b149d4eb3171afbdc90b2a2e46fc706255f96db37d5af1e8e1649385f7c052b523560d52eafbf7f30bcacd213017
-
SSDEEP
1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFUa/:NwtRonyypexoiNtxYGT
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5ced124c8d13b01e4a7da8f3d8615f77_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5ced124c8d13b01e4a7da8f3d8615f77_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken