22aad1c1845bfe8f0d663e2419a9f4d169e6c13c078b74909855a219bc7bd4c9

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
26/08/2024, 07:36

Target

c28c130d40ce0fc6a109a1714595233a_JaffaCakes118.exe
Size

345KB
MD5

c28c130d40ce0fc6a109a1714595233a
SHA1

df54a5aa1d8400680608e7c07311e30dfc2870aa
SHA256

22aad1c1845bfe8f0d663e2419a9f4d169e6c13c078b74909855a219bc7bd4c9
SHA512

205f994827534d2e4b446bfb63409d8bf4b6378256d738a50f395e7f3cc7c20594c8cb79376074dec47b1a47e1bc258186a17c983f55bdfa5771dff8824ebd8e
SSDEEP

6144:WNZd31PuSc5Y52Dt3VHhI1CztOz+PTdi2ltjv//E87YzTBIxEwXT76:WTd31PuIqt3gCEzoR7YzTKP6

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1972	c28c130d40ce0fc6a109a1714595233a_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\c28c130d40ce0fc6a109a1714595233a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\c28c130d40ce0fc6a109a1714595233a_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1972