Analysis
-
max time kernel
136s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
13-08-2024 05:16
General
-
Target
91c2e0359815c6bd159e7de7d249844f_JaffaCakes118.exe
-
Size
1.0MB
-
MD5
91c2e0359815c6bd159e7de7d249844f
-
SHA1
fba9892e9236c504edcb25aafcee549c007f5b09
-
SHA256
1211cd46ae633efd8f104fc7c7c93757457139a06e90e1a09444e13671fd7af8
-
SHA512
7157f495802ad458f3b2edbcb01ca4e1e38f96acc8437dfac235d4e9d7b72550d5ca11ebba798f549a6badee6088a20093bc5759d7142dabb035ed0cac6ac2ca
-
SSDEEP
24576:aEboxRri1tRZmUxUUx8eGW8S4tB+8bkLPzwyJ8xAmEKju:aRRGfmUP2SAB+8phec
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\91c2e0359815c6bd159e7de7d249844f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\91c2e0359815c6bd159e7de7d249844f_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
2.2MB