Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-07-2024 08:37

General

  • Target

    7352c83d0a6db4f316d7c504db817fec_JaffaCakes118.exe

  • Size

    1.2MB

  • MD5

    7352c83d0a6db4f316d7c504db817fec

  • SHA1

    7cc6d7e00193d1fb787dd244b6d4c4c9110bdf94

  • SHA256

    a4c23b8125efc78be13a590d0afa2df027a45f1a4de9872dd0da2a8dc1aac97f

  • SHA512

    eeccd948abeae73d707eede02823df78f9f2d8457299e89551947640221aa83599d84e6952b1b6a2c927ab27fc3d8919748d4b696b2a53881347dc78c34ea228

  • SSDEEP

    24576:19Jsza/yL2IBvGVZjs/G2t9CERzKZ2WIsuldm7dGKUK/cRgOnmq9g6iJGtCI:6z0VMG2jzHaOmJfcOU7m6iJi

Score
7/10

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\7352c83d0a6db4f316d7c504db817fec_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\7352c83d0a6db4f316d7c504db817fec_JaffaCakes118.exe"
    1⤵
    • Identifies Wine through registry keys
    • System Location Discovery: System Language Discovery
    PID:2108

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2108-0-0x0000000000400000-0x00000000006A8000-memory.dmp

    Filesize

    2.7MB

  • memory/2108-1-0x00000000008C0000-0x0000000000920000-memory.dmp

    Filesize

    384KB

  • memory/2108-2-0x0000000002660000-0x0000000002661000-memory.dmp

    Filesize

    4KB

  • memory/2108-44-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-58-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-57-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-56-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-55-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-54-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-53-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-52-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-51-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-50-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-49-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-48-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-47-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-46-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-45-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-43-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-42-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-41-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-40-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-39-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-38-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-37-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-36-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-35-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-34-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-33-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-32-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-31-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-30-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-29-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-28-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-27-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-26-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-25-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-24-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-23-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-22-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-21-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-20-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-19-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-18-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-17-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-16-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-15-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-14-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-13-0x0000000003590000-0x0000000003591000-memory.dmp

    Filesize

    4KB

  • memory/2108-12-0x0000000003590000-0x0000000003591000-memory.dmp

    Filesize

    4KB

  • memory/2108-11-0x0000000003590000-0x0000000003591000-memory.dmp

    Filesize

    4KB

  • memory/2108-10-0x0000000003590000-0x0000000003591000-memory.dmp

    Filesize

    4KB

  • memory/2108-9-0x0000000003590000-0x0000000003591000-memory.dmp

    Filesize

    4KB

  • memory/2108-8-0x0000000003590000-0x0000000003591000-memory.dmp

    Filesize

    4KB

  • memory/2108-7-0x00000000026C0000-0x00000000026C1000-memory.dmp

    Filesize

    4KB

  • memory/2108-6-0x0000000002630000-0x0000000002631000-memory.dmp

    Filesize

    4KB

  • memory/2108-5-0x0000000002680000-0x0000000002681000-memory.dmp

    Filesize

    4KB

  • memory/2108-4-0x00000000026B0000-0x00000000026B1000-memory.dmp

    Filesize

    4KB

  • memory/2108-3-0x0000000002650000-0x0000000002651000-memory.dmp

    Filesize

    4KB

  • memory/2108-59-0x0000000000400000-0x00000000006A8000-memory.dmp

    Filesize

    2.7MB

  • memory/2108-61-0x00000000008C0000-0x0000000000920000-memory.dmp

    Filesize

    384KB

  • memory/2108-97-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-89-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-88-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-87-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-86-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-85-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-84-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-83-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-82-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-81-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-80-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-79-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-78-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-77-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-76-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-75-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-74-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-73-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-72-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-71-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-70-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-69-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-68-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-67-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-66-0x0000000003590000-0x0000000003591000-memory.dmp

    Filesize

    4KB

  • memory/2108-65-0x0000000003590000-0x0000000003591000-memory.dmp

    Filesize

    4KB

  • memory/2108-64-0x0000000003590000-0x0000000003591000-memory.dmp

    Filesize

    4KB

  • memory/2108-96-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-95-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-94-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-93-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-92-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-91-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-90-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2108-63-0x0000000003590000-0x0000000003591000-memory.dmp

    Filesize

    4KB

  • memory/2108-62-0x0000000003590000-0x0000000003591000-memory.dmp

    Filesize

    4KB