Analysis
-
max time kernel
142s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
08/04/2024, 19:33
General
-
Target
e83c148dca3f2a79196f28c3f8c65ac8_JaffaCakes118.exe
-
Size
3.0MB
-
MD5
e83c148dca3f2a79196f28c3f8c65ac8
-
SHA1
34cdf54a466fb6eaab02785676abd01161f4930e
-
SHA256
19f70622ad89bad14af0fe603faffd2dec0beadadb54174ec29c94926621924c
-
SHA512
55174e4f167b07e43ac2d2b57c730f45ab4df738fe39b570548dc18b79ef337a16173192970e4b486ee1434cb9c5a8a860a7ed7c95ab0e4b1ccce64af32b5fe3
-
SSDEEP
49152:8+O8X+RiByvmKukDRX05xO/rureWuJXmaZUKZXINkT9raEMjaTAfqNBoa:8+O8X+RiVmRX0brSWuJXLCKZYuTRn6a
Score
9/10
Malware Config
Signatures
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer 5 IoCs
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e83c148dca3f2a79196f28c3f8c65ac8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e83c148dca3f2a79196f28c3f8c65ac8_JaffaCakes118.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Checks whether UAC is enabled
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.9MB
-
Filesize
7.9MB
-
Filesize
7.9MB
-
Filesize
7.9MB
-
Filesize
7.9MB