Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
11-08-2024 01:05
General
-
Target
88658e1420bb90fd0c4bcd2ebed1315a_JaffaCakes118.exe
-
Size
3.6MB
-
MD5
88658e1420bb90fd0c4bcd2ebed1315a
-
SHA1
2d4b6f6caf3e36a023428c6dbbae69f695a0e98e
-
SHA256
a67133e483ade848f3cfadf2310d463c5bfa532ab3cd5dc383af21367ebfe44b
-
SHA512
2a4c0a161ca218802306757af1de5ee8004d00e070b5a0179ee486abda4a1f6201d4198331a1c4e09a7ba052fa20a08097830341b78e5f0b9e92cc270448ee62
-
SSDEEP
98304:Xs9VyrG0xwQqH3iYBRoXFNa1Ply7MEhiBgK+iFEthKM+:0grBcSYBoFg4
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 15 IoCs
Detects Themida, an advanced Windows software protection system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\88658e1420bb90fd0c4bcd2ebed1315a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\88658e1420bb90fd0c4bcd2ebed1315a_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.8MB
-
Filesize
11.8MB
-
Filesize
11.8MB
-
Filesize
11.8MB
-
Filesize
11.8MB
-
Filesize
11.8MB
-
Filesize
11.8MB
-
Filesize
11.8MB
-
Filesize
11.8MB
-
Filesize
11.8MB
-
Filesize
11.8MB
-
Filesize
11.8MB
-
Filesize
11.8MB
-
Filesize
11.8MB
-
Filesize
11.8MB