Analysis
-
max time kernel
12s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
24-07-2024 02:29
General
-
Target
69ebae026e56ec856d5b78dd68c11c0b_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
69ebae026e56ec856d5b78dd68c11c0b
-
SHA1
1a74f6196dd28bdf0f3145fba3884fb00f6c11a9
-
SHA256
7f98cb80b10dec754bed05eb65532ffa4001f9cfa58af236d80c0fe576c59d1c
-
SHA512
867535a8449d7a18343c504b3a72fc2b2dfb4ce3a6d6ed5ba0e146501d13da2b3deca4146215b0de10e3b1474998d261364629927aa5ce134aa20673013d532c
-
SSDEEP
24576:RE3zIbj3v3fXwwwvLBQJyQcVr7XvZ7dh0i56PGxvqvVhUp8XIHj:Rb3vv3fQDR/ZT0s6+xKEpvHj
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\69ebae026e56ec856d5b78dd68c11c0b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\69ebae026e56ec856d5b78dd68c11c0b_JaffaCakes118.exe"1⤵
- Checks BIOS information in registry
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.4MB
-
Filesize
3.4MB