Analysis
-
max time kernel
92s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
14/07/2024, 09:46
Behavioral task
behavioral1
Sample
454b2911f01fc7390cad0e1cd0bdd7a0_JaffaCakes118.exe
Resource
win7-20240705-en
6 signatures
150 seconds
General
-
Target
454b2911f01fc7390cad0e1cd0bdd7a0_JaffaCakes118.exe
-
Size
3.5MB
-
MD5
454b2911f01fc7390cad0e1cd0bdd7a0
-
SHA1
2ca2c69d5c19e7ed4a67cb585de7a2e33c48d554
-
SHA256
3b3f4bf2339aa8da609b52b4bf9d86482298261d320dcc36d3d627f1044e12ea
-
SHA512
2eb57512b5b8fcef6bc9aa7bef11975ff1390d9679419f2c26e017787ec77badfb4d33ee2e459c44e81ac4dfca3a6056461fdfe23f9d18b403a4c0a6ea307a68
-
SSDEEP
49152:SY78SGAcC+NurXM7A03AGtkkhvJn2NJeZuuO0FwKrThMqdVM8yrjNixsWkhM29b3:dx+2cJSGZM0Fr3dzy4xdRYPy2+XGBK/
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
description ioc Process Key opened \REGISTRY\USER\S-1-5-21-1750093773-264148664-1320403265-1000\Software\Wine 454b2911f01fc7390cad0e1cd0bdd7a0_JaffaCakes118.exe -
resource yara_rule behavioral2/memory/2812-0-0x0000000000400000-0x00000000011E3000-memory.dmp themida behavioral2/memory/2812-3-0x0000000000400000-0x00000000011E3000-memory.dmp themida