Overview

overview

7

Static

static

7

8a2e948dd5...18.exe

windows7-x64

7

8a2e948dd5...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a2e948dd5d8e7e6c34ff3ddce67cb07_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240811-nj29baxcrk

  • MD5

    8a2e948dd5d8e7e6c34ff3ddce67cb07

  • SHA1

    3a0e6333372d5bcfb379870e753cfee492a6062e

  • SHA256

    43530f45c59a90ca3fd7729f6d0c1c36476d4051dca723d65752e3ac016a0d26

  • SHA512

    4b8c549053b2ce341db55535ffafdb8738322259daccce976000e117ecfce26843532061282de8dfdc3d6f7f485a5b362950e78149e0b6f40ce51fe3fc8b6bad

  • SSDEEP

    24576:pLb6F0lEL5pf/KRGz3YG8yf3/qIOO9WW/s+bqc3pwUTyv8xF3Rpcdev0hqcMF8IT:FWFU27/KYDdv/MO9WP6qcZwUTykx19Ge

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      8a2e948dd5d8e7e6c34ff3ddce67cb07_JaffaCakes118

    • Size

      1.2MB

    • MD5

      8a2e948dd5d8e7e6c34ff3ddce67cb07

    • SHA1

      3a0e6333372d5bcfb379870e753cfee492a6062e

    • SHA256

      43530f45c59a90ca3fd7729f6d0c1c36476d4051dca723d65752e3ac016a0d26

    • SHA512

      4b8c549053b2ce341db55535ffafdb8738322259daccce976000e117ecfce26843532061282de8dfdc3d6f7f485a5b362950e78149e0b6f40ce51fe3fc8b6bad

    • SSDEEP

      24576:pLb6F0lEL5pf/KRGz3YG8yf3/qIOO9WW/s+bqc3pwUTyv8xF3Rpcdev0hqcMF8IT:FWFU27/KYDdv/MO9WP6qcZwUTykx19Ge

    Score
    7/10
    evasionthemidadiscovery

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks