2000851e3837dcb74d6daf168d747728b1ec41096f199c815db3090917060ee9

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
21-09-2024 21:27

Target

f0a5a301a91d5e429245e1114b86ef95_JaffaCakes118.exe
Size

289KB
MD5

f0a5a301a91d5e429245e1114b86ef95
SHA1

c369008742eac9eaaf58083733a219073a7e9420
SHA256

2000851e3837dcb74d6daf168d747728b1ec41096f199c815db3090917060ee9
SHA512

ca0fb692e51f82603ee2fc9a9eca8f36882ed0048140a71be75d8fdd7511611e4d719ec45762259504c8742995f87b4518680a777b3fe16f71247f592ec2cafc
SSDEEP

6144:oUi0aRHUY1vjapGWCNp/G2H+tv0TBZvzKuJE:Di0aRHUAjapGWCNp/G2H+tv0TP2uJE

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2936	f0a5a301a91d5e429245e1114b86ef95_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f0a5a301a91d5e429245e1114b86ef95_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f0a5a301a91d5e429245e1114b86ef95_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2936