Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
26/06/2024, 04:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
10be3cb02a9ce4743d9159c9c1ade65e_JaffaCakes118.exe
Resource
win7-20240221-en
9 signatures
150 seconds
General
- Target 10be3cb02a9ce4743d9159c9c1ade65e_JaffaCakes118.exe
- Size 2.6MB
- Sample240626-e889gsyapp
- SHA256 33399f6791079a8d92220da51811a176e8c22a04325ea9fd05c61f2923a7889d
- MD5 10be3cb02a9ce4743d9159c9c1ade65e
- SHA1 03877647255e7b0b5edb2dfd2f5e17631d77508e
- SHA512 6f52322ed761697e1f97528c706ff3e8417c0803589a8f892632afef28ac66053af7002642fc33842e2b1f887f8065a635c1a67df120a9584501f18a7076d63b
- SSDEEP 49152:QG5k/YZCQtqk7CsCf31oNljPi8jfu9V4M3OSrxEk94EoXmQ37w5SlDjVoo:Q4k/YZCqCyNpFaVUSrx14/N37eSlHVoo
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
description ioc Process Key opened \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Software\Wine 10be3cb02a9ce4743d9159c9c1ade65e_JaffaCakes118.exe -
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA 10be3cb02a9ce4743d9159c9c1ade65e_JaffaCakes118.exe