Analysis
- max time kernel
148s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system - submitted
13/07/2024, 07:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
40cc348290cfa3ed0b762329b862e3d1_JaffaCakes118.exe
Resource
win7-20240704-en
8 signatures
150 seconds
General
- Target 40cc348290cfa3ed0b762329b862e3d1_JaffaCakes118.exe
- Size 499KB
- Sample240713-jljsjascpm
- SHA256 d9d05ccde0474ec0cbf0291ecf8b385a1b4395d852263ae09f2771f969bd328e
- MD5 40cc348290cfa3ed0b762329b862e3d1
- SHA1 88da9b0f3591b1ea5d5843d4893f0a2f56bb6515
- SHA512 7f84e2cc0de9bc8bf95a9579f68b9a26fca412cc48029cfdfcfb56a2db27866813c52678dd9d3d2e2883904d2134fc8327fa3882bd88b5074bbc62d9cc4399cc
- SSDEEP 12288:OKtE03w6No91d134ZedpQpxHtmhnEbr8crxR38bh:O+JA6C9b13D2xNbv/xeb
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
description ioc Process Key opened \REGISTRY\USER\S-1-5-21-1705699165-553239100-4129523827-1000\Software\Wine 40cc348290cfa3ed0b762329b862e3d1_JaffaCakes118.exe -
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA 40cc348290cfa3ed0b762329b862e3d1_JaffaCakes118.exe