Analysis
-
max time kernel
141s -
max time network
117s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
23-08-2024 19:19
Behavioral task
behavioral1
Sample
bcdc123a636493f3fba1b5391b2c6e9b_JaffaCakes118.exe
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bcdc123a636493f3fba1b5391b2c6e9b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
bcdc123a636493f3fba1b5391b2c6e9b_JaffaCakes118.exe
-
Size
487KB
-
MD5
bcdc123a636493f3fba1b5391b2c6e9b
-
SHA1
d146a54eb4597e9cbb6a0dddc0c2717fea18244e
-
SHA256
3449bf3a4a172a755e60ca31b4790dc5a86c4d375c3601a4d3c88833c6c4f112
-
SHA512
16e9ddf0b00964895aa90043b067b79ed6d196b6e6de1d7bf63accc9aed1e9963c34a9cfe17ad9ff5630823ba9d95d6cf083c56f5a0dee3931fc2cc8ad70671d
-
SSDEEP
12288:vfPEccw1ao4H5WuIcsPVhKa+BsyeV4pmAItpCx:vfJ8X5dsPVhsfeV4IHI
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: RenamesItself 1 IoCs
pid Process 4444 bcdc123a636493f3fba1b5391b2c6e9b_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeDebugPrivilege 4444 bcdc123a636493f3fba1b5391b2c6e9b_JaffaCakes118.exe Token: 33 4444 bcdc123a636493f3fba1b5391b2c6e9b_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 4444 bcdc123a636493f3fba1b5391b2c6e9b_JaffaCakes118.exe