Overview

overview

8

Static

static

7

2a7cbc6780...18.exe

windows7-x64

8

2a7cbc6780...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    91s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/07/2024, 01:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2a7cbc67800debf7f991829cf1c2de89_JaffaCakes118.exe

  • Size

    4.7MB

  • MD5

    2a7cbc67800debf7f991829cf1c2de89

  • SHA1

    cdc6f2013d14e68a3e202a05cb3227597db8504c

  • SHA256

    d96a6676c2921baccd03c2c6f787b05f0c13643f3a861ac5bda211e0c5f31a99

  • SHA512

    3009eba834f270e13c7efbd17793c71a67fafe92daa5a62b2a44f92f413b88f1e13c187142c35bb66b0338145d209e29194d2b667ad5085c16cdfc1e18684d82

  • SSDEEP

    98304:Q9lcRqOJSQt04ayS7/mPbmfxzMu7aJL4bSp7DKYFFE6:bqOJT04A/mPgt4NgSp37Z

Score
7/10
evasionthemida

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida

Processes

  • C:\Users\Admin\AppData\Local\Temp\2a7cbc67800debf7f991829cf1c2de89_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2a7cbc67800debf7f991829cf1c2de89_JaffaCakes118.exe"
    1⤵
    • Identifies Wine through registry keys
    PID:3612

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3612-0-0x0000000000400000-0x0000000001FB9000-memory.dmp

    Filesize

    27.7MB

    Download

  • memory/3612-1-0x0000000000400000-0x0000000001FB9000-memory.dmp

    Filesize

    27.7MB

    Download