13939687cbc5904a699f3671ceb8ebd2a12c93bd5d7bc412e99872201d708d13

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
11/01/2025, 06:46

Target

JaffaCakes118_f9e7900562013d82e90b508a28d19cd3.exe
Size

1.4MB
MD5

f9e7900562013d82e90b508a28d19cd3
SHA1

f32cff22b31043930e6397c46b6e2ad4e3105770
SHA256

13939687cbc5904a699f3671ceb8ebd2a12c93bd5d7bc412e99872201d708d13
SHA512

4add6d396a79c9a239fde17e0060e8f2eabadb8d8a8c258e045445ca2ca87dcc3622fad62a44d118a764d6f5eb0b69e4e1ef6f5d97a141217c8fff4a1db2bc4e
SSDEEP

12288:W8bP3nCeXLVTrYqgNEIrEkoNk7L6zSZpl8rAAXIR8R19:W8OqRTMrRoNk7BZpUAAXIR8RL

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2324	JaffaCakes118_f9e7900562013d82e90b508a28d19cd3.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_f9e7900562013d82e90b508a28d19cd3.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_f9e7900562013d82e90b508a28d19cd3.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2324