Overview

overview

7

Static

static

3

08545b4443...18.exe

windows7-x64

7

08545b4443...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    138s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/06/2024, 17:44

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    08545b44439c2869ba8c0b8a4d8f96fc_JaffaCakes118.exe

  • Size

    3.4MB

  • MD5

    08545b44439c2869ba8c0b8a4d8f96fc

  • SHA1

    7be7630dffd313b939562ab98fa4f9d3f06cb531

  • SHA256

    d1c1067e4cfdf3c30d3f13eadce8a72bbf32317ee67939db7a4fcc04d2d2e0fb

  • SHA512

    4c74c75ead9e6d72665120e8f18b52a6f32ee1b5342d66d4773e1a103d3e07f834f7fc5ba4c1c89d5c7189ee3ea7894b7825b291b36d8a228ea62e24218c56b1

  • SSDEEP

    49152:jocuK7GiCs9h6oArnSIQ1zTRESF5+9u9jM5dgzhywgDjuHBjTkrHyUuTQf/I4GZS:nQlrS/Lmu9hN8juhjQS+I4GZKKQ

Score
7/10
evasion

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\08545b44439c2869ba8c0b8a4d8f96fc_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\08545b44439c2869ba8c0b8a4d8f96fc_JaffaCakes118.exe"
    1⤵
    • Identifies Wine through registry keys
    PID:1568

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1568-2-0x00000000027F0000-0x00000000028E1000-memory.dmp

          Filesize

          964KB

          Download

        • memory/1568-1-0x0000000000DA0000-0x0000000000DA1000-memory.dmp

          Filesize

          4KB

          Download

        • memory/1568-0-0x0000000000400000-0x0000000000AFA000-memory.dmp

          Filesize

          7.0MB

          Download