d73c94e0b2d2a712a2109d2bca8348b127b4e24b72fe82f65cef823b8d3707d0

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
11/10/2024, 21:14

Target

36d712f6aebb9c7776e608706c7b6d38_JaffaCakes118.exe
Size

2.8MB
MD5

36d712f6aebb9c7776e608706c7b6d38
SHA1

feb25a120c331d18a6e677ecbc94fb59046bdbb0
SHA256

d73c94e0b2d2a712a2109d2bca8348b127b4e24b72fe82f65cef823b8d3707d0
SHA512

d2240cc4bea909c26e33cad7737fa2d597201a79b74a86b71aa8c14c4b628950ac934dbdbf945f93072396a73bc0937ade5723d804bcee9e1e822e3d0242eaca
SSDEEP

49152:NOywlj4hKPgssSt2gboJdXN0BMOwLloBrugV:zlhv7StiJdXN0B7+sf

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1628	36d712f6aebb9c7776e608706c7b6d38_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\36d712f6aebb9c7776e608706c7b6d38_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\36d712f6aebb9c7776e608706c7b6d38_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1628