ebf98b1765f83d666f714252443e59f667c8182705db66ed5afcf6d7d629653c

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
25-09-2024 15:32

Target

f650e6e31ca45de132ce0d22521fe378_JaffaCakes118.exe
Size

9KB
MD5

f650e6e31ca45de132ce0d22521fe378
SHA1

96b2b6bfc3fb2545fc4891ed7ac572b63a2703da
SHA256

ebf98b1765f83d666f714252443e59f667c8182705db66ed5afcf6d7d629653c
SHA512

83642842362842fa2f18e5a24d961cad2656b631e4de98b558d94c6d6d7a84758981f2a9f9d6bfe572ccb3969192dec037f3abe7b38ecbac526d2e79d8bf8816
SSDEEP

192:yMsCPY82gQv5F4xt7eMZZ3g93Vnjdwvzhn32TseVnV9i:M82l4xt7eMUFnhwv9GQeVV9

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2104	f650e6e31ca45de132ce0d22521fe378_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2104 wrote to memory of 2152	2104	f650e6e31ca45de132ce0d22521fe378_JaffaCakes118.exe	31
PID 2104 wrote to memory of 2152	2104	f650e6e31ca45de132ce0d22521fe378_JaffaCakes118.exe	31
PID 2104 wrote to memory of 2152	2104	f650e6e31ca45de132ce0d22521fe378_JaffaCakes118.exe	31

C:\Users\Admin\AppData\Local\Temp\f650e6e31ca45de132ce0d22521fe378_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f650e6e31ca45de132ce0d22521fe378_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2104
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2104 -s 892
  2⤵
  PID:2152

memory/2104-0-0x000007FEF5903000-0x000007FEF5904000-memory.dmp

Filesize
4KB

Download
memory/2104-1-0x00000000001C0000-0x00000000001C8000-memory.dmp

Filesize
32KB

Download
memory/2104-2-0x000007FEF5900000-0x000007FEF62EC000-memory.dmp

Filesize
9.9MB

Download
memory/2104-3-0x000007FEF5903000-0x000007FEF5904000-memory.dmp

Filesize
4KB

Download
memory/2104-4-0x000007FEF5900000-0x000007FEF62EC000-memory.dmp

Filesize
9.9MB

Download