Analysis
-
max time kernel
94s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
06-07-2024 07:48
Static task
static1
Behavioral task
behavioral1
Sample
27c94c4026f36449dfd05fdf1f046319_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27c94c4026f36449dfd05fdf1f046319_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27c94c4026f36449dfd05fdf1f046319_JaffaCakes118.exe
-
Size
1.5MB
-
MD5
27c94c4026f36449dfd05fdf1f046319
-
SHA1
3883169c8c2dcd0e8a7b9ecc2bf1afa2b0d99a8e
-
SHA256
58234e6f84fc86f39686633a61736cb1f17fa1e324799b3610885752b1238e52
-
SHA512
e112bdb9358d10917635a2b26617aa31a4ac20962ba84c3b9246bad1aa37f1158fc6c385c78b300fdc7b155c7a8acd05f3d01ba02d282c19eec377f3d8347420
-
SSDEEP
49152:7KaggjaPgEXRbCTKw+l+ghjTlvFCFtY5Z42:7fgcaDXRbCnnof1FCFe/B
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
description ioc Process Key opened \REGISTRY\USER\S-1-5-21-1403246978-718555486-3105247137-1000\Software\Wine 27c94c4026f36449dfd05fdf1f046319_JaffaCakes118.exe