Overview

overview

10

Static

static

7

3c9988b6c0...18.exe

windows7-x64

10

3c9988b6c0...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    93s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/07/2024, 08:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    3c9988b6c0f82e91deb045114068fe02_JaffaCakes118.exe

  • Size

    770KB

  • MD5

    3c9988b6c0f82e91deb045114068fe02

  • SHA1

    04e8e3fb01007c670c08594ff299ae9b1dfa78c6

  • SHA256

    c626a685a21dd0935959914a839cbb60585d89021de7514a7c58e623ea56f8b9

  • SHA512

    92bbcbf2a89a3e3a3eba7f990e072a3213e55fe9f12b30a0afbfdb18c6d047be301012bc0f95aaa47e64c2267fb52f9238c171dc8967696666b9d934c9a79346

  • SSDEEP

    12288:QQl87vobjxG3gVI7KfkUZnAmk9DcDu1Vrf+OEaTgXPlG65I+oTMp:QQl8IjG8rkxmVujI/lxOI

Score
7/10
evasionthemida

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida

Processes

  • C:\Users\Admin\AppData\Local\Temp\3c9988b6c0f82e91deb045114068fe02_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3c9988b6c0f82e91deb045114068fe02_JaffaCakes118.exe"
    1⤵
    • Identifies Wine through registry keys
    PID:4344

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4344-0-0x0000000000400000-0x00000000005AF000-memory.dmp

          Filesize

          1.7MB

          Download

        • memory/4344-1-0x0000000000400000-0x00000000005AF000-memory.dmp

          Filesize

          1.7MB

          Download