Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
11/08/2024, 11:26
General
-
Target
8a2e948dd5d8e7e6c34ff3ddce67cb07_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
8a2e948dd5d8e7e6c34ff3ddce67cb07
-
SHA1
3a0e6333372d5bcfb379870e753cfee492a6062e
-
SHA256
43530f45c59a90ca3fd7729f6d0c1c36476d4051dca723d65752e3ac016a0d26
-
SHA512
4b8c549053b2ce341db55535ffafdb8738322259daccce976000e117ecfce26843532061282de8dfdc3d6f7f485a5b362950e78149e0b6f40ce51fe3fc8b6bad
-
SSDEEP
24576:pLb6F0lEL5pf/KRGz3YG8yf3/qIOO9WW/s+bqc3pwUTyv8xF3Rpcdev0hqcMF8IT:FWFU27/KYDdv/MO9WP6qcZwUTykx19Ge
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 3 IoCs
Detects Themida, an advanced Windows software protection system.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8a2e948dd5d8e7e6c34ff3ddce67cb07_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8a2e948dd5d8e7e6c34ff3ddce67cb07_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.6MB
-
Filesize
4KB
-
Filesize
948KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
2.6MB
-
Filesize
2.6MB