Analysis
-
max time kernel
122s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
23/07/2024, 02:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
65c65bd31b31dd2873da9cd7037a95a9_JaffaCakes118.exe
Resource
win7-20240704-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
65c65bd31b31dd2873da9cd7037a95a9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
3 signatures
150 seconds
General
-
Target
65c65bd31b31dd2873da9cd7037a95a9_JaffaCakes118.exe
-
Size
91KB
-
MD5
65c65bd31b31dd2873da9cd7037a95a9
-
SHA1
280df97e2a176cd403e4884e9d8a86b4fdbe2e0f
-
SHA256
96ac6a208908e2adcff58a6e037f92668e75f5fec66a5d952b5281fd81a8ee66
-
SHA512
daa04594b9e7fa5a14a4b8cd666b61054c7b932b6cedd139849833d420828b095c69648e6bd076acf3cdcba51790725d1f91f4f3f79d28c4d295b1275b849229
-
SSDEEP
1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEF8Z:NwtRonyypexoiNtxYG8Z
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2804 65c65bd31b31dd2873da9cd7037a95a9_JaffaCakes118.exe -
Suspicious behavior: MapViewOfSection 1 IoCs
pid Process 2804 65c65bd31b31dd2873da9cd7037a95a9_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2804 65c65bd31b31dd2873da9cd7037a95a9_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\65c65bd31b31dd2873da9cd7037a95a9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\65c65bd31b31dd2873da9cd7037a95a9_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
PID:2804