Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
16/07/2024, 03:45
General
-
Target
4cae52c77330a244ca09457804b49f0d_JaffaCakes118.exe
-
Size
3.2MB
-
MD5
4cae52c77330a244ca09457804b49f0d
-
SHA1
40b339eccdfd94678c630652e7ef65d5162de973
-
SHA256
1ae6c49ebed115dff7417c829a7e404700f85d52398ade7dd9ef42860c9bf95b
-
SHA512
567a491b4139ef37582c1c74e506482c19c4f6942253fe8981585ae9d7791e950862647e3131e4b0861396ccbcaed4aedc291cd73ab3d5f5bc05be25bad70369
-
SSDEEP
98304:XbbWeggo2Vzywcr0p8D5Yqg/d+e2LO5cF2wKBly:RggpEy8D5Yqm34O5ckL
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\4cae52c77330a244ca09457804b49f0d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4cae52c77330a244ca09457804b49f0d_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
15.6MB
-
Filesize
4KB
-
Filesize
940KB
-
Filesize
15.6MB