Overview

overview

7

Static

static

3

40b9fbe36f...18.exe

windows7-x64

7

40b9fbe36f...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/07/2024, 07:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    40b9fbe36feaf6b69b9eb9e4ad25b7ba_JaffaCakes118.exe

  • Size

    1.4MB

  • MD5

    40b9fbe36feaf6b69b9eb9e4ad25b7ba

  • SHA1

    7b10f1af6f20afb67ae1096c47b4dfb123222cf9

  • SHA256

    138a81a77a9dc9c070e68b8b091b9390e5951bc9071925baa9c9e9f1de104ad9

  • SHA512

    41bf99ac991d81164e5e06a9ea7d0dd725a4fe4f39983614cc52fd1b12db76d8c1e0e39e5a92b47a8edf15e7f1e0eb02c8cabc214c19502a1755280eaf14ed52

  • SSDEEP

    24576:C/OoZrf5EY47w2cHritsZ7Pp1IaHDuyBjjYnsU81m2dze+:CLNwwmk7PpnHHj0t81m2dze+

Score
7/10
evasion

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\40b9fbe36feaf6b69b9eb9e4ad25b7ba_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\40b9fbe36feaf6b69b9eb9e4ad25b7ba_JaffaCakes118.exe"
    1⤵
    • Identifies Wine through registry keys
    PID:3608

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3608-0-0x0000000000400000-0x0000000000711000-memory.dmp

          Filesize

          3.1MB

          Download

        • memory/3608-1-0x0000000000400000-0x0000000000711000-memory.dmp

          Filesize

          3.1MB

          Download