Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
09-01-2025 17:46
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_ce36f24b7ed2e0741d40a20feb63d72a.exe
Resource
win7-20241010-en
windows7-x64
2 signatures
150 seconds
General
-
Target
JaffaCakes118_ce36f24b7ed2e0741d40a20feb63d72a.exe
-
Size
155KB
-
MD5
ce36f24b7ed2e0741d40a20feb63d72a
-
SHA1
b54deaa1aec753435374eb2912cb3d4990fb5356
-
SHA256
4dbd1787587152a4a413147c100dd4ddaa8b30398e8f3f776278a9ca3d9e8986
-
SHA512
f27630f6683a2f8360c0db838382809cafc55a29329e25904cc5f5fc8ae6620ba5d7f490f3b1a4d36d1be860e2d44caa2dcb67630edac3a9fb220ece37706254
-
SSDEEP
3072:iLXxPuabKBDzqS1NZri5GT9Hqnq94JVN69y0WiMm:IX1uabKBDeSAAhHboN69J
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1684 JaffaCakes118_ce36f24b7ed2e0741d40a20feb63d72a.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1684 JaffaCakes118_ce36f24b7ed2e0741d40a20feb63d72a.exe