Analysis
-
max time kernel
143s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
10-08-2024 03:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
84b3e075d9a76d53c8d68f6cfc820dea_JaffaCakes118.exe
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
84b3e075d9a76d53c8d68f6cfc820dea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
84b3e075d9a76d53c8d68f6cfc820dea_JaffaCakes118.exe
-
Size
57KB
-
MD5
84b3e075d9a76d53c8d68f6cfc820dea
-
SHA1
e1bd92032229c0c3e36acc1b2b93e573295af6c5
-
SHA256
0b5ed50371d5752363025136af89751e20093673dba5a7739af92332ceebd58d
-
SHA512
d2cc53e6233cc30801afb965236a57614816ac23be8534c16ea22a4d6d02a33c6d14c351e1b84330ec8491db8a307af90d3ea603810944d4b438571a74969aeb
-
SSDEEP
1536:GALSAWyd1cwe9yWdMe2LOj/KojKfPzBA8FaIf:0AWyd1cwe9yWdMe2OKojKTBA8F3
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2340 84b3e075d9a76d53c8d68f6cfc820dea_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2340 84b3e075d9a76d53c8d68f6cfc820dea_JaffaCakes118.exe