0c2cc55624cfbc167c5d6dce418a1041adf75543a1109c63746d968c53922c4a

Analysis

max time kernel
125s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25/09/2024, 09:20

Target

f5b11ecbca2bcba74baa10c8224f4fa7_JaffaCakes118.exe
Size

9KB
MD5

f5b11ecbca2bcba74baa10c8224f4fa7
SHA1

a4214e21bf9e1babb7b09625c18d59d039fef5e6
SHA256

0c2cc55624cfbc167c5d6dce418a1041adf75543a1109c63746d968c53922c4a
SHA512

c9f3c7ccc6e2ba386682d08241880f4596e00a719d2abc19089af25c9496e7d86e5d034b66f83ae42ed1bde09500f3b3556546d09d806975b6ab266329216eca
SSDEEP

192:sBksuXm6N7oy13feMZZ3793VnjdwqzL3tYuPc7:u4xFfeMFFnhwqHdYuk

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2352	f5b11ecbca2bcba74baa10c8224f4fa7_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f5b11ecbca2bcba74baa10c8224f4fa7_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f5b11ecbca2bcba74baa10c8224f4fa7_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2352

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1012,i,3861745594156495651,17595114179815238301,262144 --variations-seed-version --mojo-platform-channel-handle=1408 /prefetch:8
1⤵
PID:1652

memory/2352-1-0x0000000000440000-0x0000000000448000-memory.dmp

Filesize
32KB

Download
memory/2352-0-0x00007FFD01A53000-0x00007FFD01A55000-memory.dmp

Filesize
8KB

Download
memory/2352-2-0x0000000000C00000-0x0000000000C12000-memory.dmp

Filesize
72KB

Download
memory/2352-3-0x0000000002770000-0x00000000027AC000-memory.dmp

Filesize
240KB

Download
memory/2352-4-0x00007FFD01A50000-0x00007FFD02511000-memory.dmp

Filesize
10.8MB

Download
memory/2352-5-0x00007FFD01A53000-0x00007FFD01A55000-memory.dmp

Filesize
8KB

Download
memory/2352-6-0x00007FFD01A50000-0x00007FFD02511000-memory.dmp

Filesize
10.8MB

Download
memory/2352-7-0x00007FFD01A50000-0x00007FFD02511000-memory.dmp

Filesize
10.8MB

Download