Overview

overview

7

Static

static

7

834a16baf0...18.exe

windows7-x64

7

834a16baf0...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    834a16baf0a3e051601dd41cbfb05f29_JaffaCakes118

  • Size

    671KB

  • Sample

    240802-gqrylazcjj

  • MD5

    834a16baf0a3e051601dd41cbfb05f29

  • SHA1

    f959d6715f2982b9ce2e774bc75f211fa964583c

  • SHA256

    7fa48f2aa2e7923ae20f0218af12ab374a63369b09ed191acd01731b00ba10e1

  • SHA512

    5ce1d5e8f5c7924e08c47de55aa12b45722a828e0513d59746872ee609e5d2214498d54af74c605ac5ebd57ff5c4e34c2cdc5aeebf4b3bb08043cae307204378

  • SSDEEP

    12288:vzeLrieQW58orMYh3ahAd1PJcnzsibCZcu+I35tfnCanXC+WE:vaLrieQiQYh3ahAdzcnzsibCGXI35tqi

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      834a16baf0a3e051601dd41cbfb05f29_JaffaCakes118

    • Size

      671KB

    • MD5

      834a16baf0a3e051601dd41cbfb05f29

    • SHA1

      f959d6715f2982b9ce2e774bc75f211fa964583c

    • SHA256

      7fa48f2aa2e7923ae20f0218af12ab374a63369b09ed191acd01731b00ba10e1

    • SHA512

      5ce1d5e8f5c7924e08c47de55aa12b45722a828e0513d59746872ee609e5d2214498d54af74c605ac5ebd57ff5c4e34c2cdc5aeebf4b3bb08043cae307204378

    • SSDEEP

      12288:vzeLrieQW58orMYh3ahAd1PJcnzsibCZcu+I35tfnCanXC+WE:vaLrieQiQYh3ahAdzcnzsibCGXI35tqi

    Score
    7/10
    discoveryevasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks