Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
16-07-2024 05:50
Static task
static1
Behavioral task
behavioral1
Sample
4d0d097d6260794554901f35f6e3e84f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d0d097d6260794554901f35f6e3e84f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d0d097d6260794554901f35f6e3e84f_JaffaCakes118.exe
-
Size
1.6MB
-
MD5
4d0d097d6260794554901f35f6e3e84f
-
SHA1
d27695559319a42055d63f30bd9f7aa2a0998877
-
SHA256
a7e9d7af7f9cb0ca60d197484de19f73f56caf024e82e2d03c4d0cb7574c7143
-
SHA512
9608ec97041476ec5c49441addbee872957e9def68576e913e12a3bc4c86bce9a423b5a79da0e1e0ba9c58d4db5b9b62c77de50c396256292a8e35ba621cb79a
-
SSDEEP
24576:3Hs2mGGqx38eX0wzdHnLf05MRlXFswbnBRNsONIQg5VLTF6VN6GisYM90MFxleHs:XtxfLzdHhHhjNBIQg316VN3ZjYpDA
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
description ioc Process Key opened \REGISTRY\USER\S-1-5-21-384068567-2943195810-3631207890-1000\Software\Wine 4d0d097d6260794554901f35f6e3e84f_JaffaCakes118.exe