Analysis
-
max time kernel
149s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
22/07/2024, 18:04
Behavioral task
behavioral1
Sample
64386644a680dfb7c4c1467585023911_JaffaCakes118.exe
Resource
win7-20240708-en
2 signatures
150 seconds
General
-
Target
64386644a680dfb7c4c1467585023911_JaffaCakes118.exe
-
Size
661KB
-
MD5
64386644a680dfb7c4c1467585023911
-
SHA1
388f3427de115e7a4fca518791e3b322cb2a3000
-
SHA256
6d9d895ac20d3302c1b42118a53a3787a77af1f81891a452d457f503092de81b
-
SHA512
1fe6fdbe1cb8a3f0ab45e5dc7c771ce67d3df38460be25b4d8990c822b8b12f79de57ffb9d0b81802bb5d6a5b0ab09ea8c9ee6d23a77458521d2df2d2f3c6799
-
SSDEEP
12288:I3OpvNW4a76S/Ddon/m09bbYlIaaMcE2YGhq3vo1RnfAvIESJgoE26yc/R:+OA4aWNn/m09fKIaaBEtWq3A1Ov8JgbD
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 23 IoCs
description pid Process Token: SeIncreaseQuotaPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeSecurityPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeTakeOwnershipPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeLoadDriverPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeSystemProfilePrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeSystemtimePrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeProfSingleProcessPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeCreatePagefilePrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeBackupPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeRestorePrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeShutdownPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeDebugPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeSystemEnvironmentPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeChangeNotifyPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeRemoteShutdownPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeUndockPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeManageVolumePrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeImpersonatePrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeCreateGlobalPrivilege 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: 33 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: 34 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: 35 1288 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe