Analysis
-
max time kernel
141s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25/06/2024, 00:36
General
-
Target
0b8e3a03835538522a3169b05a28b8c4_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
0b8e3a03835538522a3169b05a28b8c4
-
SHA1
77b4b07f7f41c9f781d8e5a8feea6dd2324eb40c
-
SHA256
e6c90b7f3ffdfada2ff3cbb7160b8cf2f95a0480cf58122aa4fa68307a924376
-
SHA512
d7dd40d7471ca122e29145daf04c684c335f534c5611d1c67e8e0c978c62412ce90693731cbade462035dc9af52f22106e8f6af16cbc8d74b1273a397f4f65b3
-
SSDEEP
24576:tIHy+ZbxhZ2hMP235o5W9IDqcAQLhiHvJyd86Zu8JpAuiY2r:kZNiL9ZwYPJyd8Yu8JpArY2r
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Loads dropped DLL 2 IoCs
-
Themida packer 20 IoCs
Detects Themida, an advanced Windows software protection system.
-
UPX packed file 23 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0b8e3a03835538522a3169b05a28b8c4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0b8e3a03835538522a3169b05a28b8c4_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD5f91a136d20dfa1ecddc2e0525bc96316
SHA12c01991d575298c3f42376b797ec5d13d730f89b
SHA2564efaa2ab06a6088d7c422a7518f223b5122355a1e403d668e7ffcfc5b8d11301
SHA5123ad6d23c1c10d718aaf8f555001a094b53e71fc74135717c7d6155180a9d2d0b8e8922061d2cfb4a5e38844388e81fc688dce7420200b22d6c6e6ce9489f3af8
-
Filesize
2KB
MD54e9ca2fa1ee6a996436d81f06dd376c8
SHA1d70ec28a49565e031d5f7a6156e2faaf2eb1ef4b
SHA256ef5a6cb2bb3316c985a8e22824f2671c75a730ce0152a435ed2330872f268073
SHA512bda49122375b963b1db0e3adf9958734bca7969ed70cf11ffb036e441dab384d9ebf397b3ba146ae42170c285a7484e29766d5807fe500e59cf48ca95535c761
-
Filesize
1.5MB
-
Filesize
80KB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
1.5MB
-
Filesize
4KB
-
Filesize
1.5MB
-
Filesize
184KB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
80KB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
1.2MB