Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
07/10/2024, 23:11
Behavioral task
behavioral1
Sample
1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe
- Size 116KB
- Sample241007-26ey7axejp
- SHA256 9440f0798252c8a0d9ad7d9a930694c1d4bd20263c3797b14a932c0fdd193463
- MD5 1e60aa5b672b3ecb62c7bcd0684d016e
- SHA1 892c9c4d165b8cbc3841e48e90da4da72337098f
- SHA512 cc14c65495f45bf21fbe73599440947932739d59e0e04606a12aa66d2959d07074b054c3e6ccd5f491b2c77786760080b52886ceac88ad2de484a4bf062635d2
- SSDEEP 3072:Q0puHjtk03WR5mVJxmOIIiLYj5+GtjyYlVnGa1A+jWTQas7fkE0U0w2yMww1331O:LpwpfCZn5yMwYXIp
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Drops desktop.ini file(s) 2 IoCs
description ioc Process File opened for modification C:\Windows\assembly\Desktop.ini 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe File created C:\Windows\assembly\Desktop.ini 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe - Drops file in Windows directory 3 IoCs
description ioc Process File opened for modification C:\Windows\assembly 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe File created C:\Windows\assembly\Desktop.ini 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe File opened for modification C:\Windows\assembly\Desktop.ini 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe Token: 33 3728 1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe