Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
16/07/2024, 03:12
General
-
Target
4c9189f15876e84c594a32fc1a2231a9_JaffaCakes118.exe
-
Size
843KB
-
MD5
4c9189f15876e84c594a32fc1a2231a9
-
SHA1
5de871b3ebd6e945687658c29558990623c40d68
-
SHA256
dccbea94867ef29fd0f1f7cc60a1f104c2e4d3bb614649dd7648776c9838daf4
-
SHA512
7ee78ecaa04cf5a711221d9b57b4674f455510e13be6774e6d4feaa03890bbadcf65234f09178c3cc9119d91fa6be53687f996ff1d9258873a1916f4ccb9a920
-
SSDEEP
24576:1iHQ1R1vn2XcRmLgN5clKw5xYJ41C6c+7Cl2KtCAOpLc7k:1aQQ5tXYK86ckCMKtCDc7k
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\4c9189f15876e84c594a32fc1a2231a9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4c9189f15876e84c594a32fc1a2231a9_JaffaCakes118.exe"1⤵
- Checks BIOS information in registry
- Identifies Wine through registry keys
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
856KB
-
Filesize
856KB