Overview

overview

7

Static

static

3

2177b6b843...18.exe

windows7-x64

7

2177b6b843...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    133s
  • max time network
    105s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-07-2024 07:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2177b6b84380ef9b15b66427c1eb3852_JaffaCakes118.exe

  • Size

    912KB

  • MD5

    2177b6b84380ef9b15b66427c1eb3852

  • SHA1

    a8b7787acc2d092a5d9060cf65f21c5288f20f1c

  • SHA256

    3d4e5a90adc5798ecaa06a61bc3be611d654943b651ce0dd96a0a97ab4531733

  • SHA512

    73a46a0d7dde525dc9c091d716538127e2ec374339fcfaf5ed7d3d8470f2bc0c7415a87d8f6d226dfd8432906526a0ef34040038e39c845cb6693e3f80120d90

  • SSDEEP

    24576:z7Mpk0ER7C/EI8ydqNG363uPwGxnlA1sI:z7Mp6RlI8WYVCwG5a1

Score
7/10
evasion

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\2177b6b84380ef9b15b66427c1eb3852_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2177b6b84380ef9b15b66427c1eb3852_JaffaCakes118.exe"
    1⤵
    • Identifies Wine through registry keys
    PID:2808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2808-0-0x0000000000400000-0x00000000005B2000-memory.dmp

    Filesize

    1.7MB

    Download

  • memory/2808-1-0x0000000000400000-0x00000000005B2000-memory.dmp

    Filesize

    1.7MB

    Download