Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
22/08/2024, 13:29
General
-
Target
b7d1517079f77ee36b60f0b1cf14d764_JaffaCakes118.exe
-
Size
630KB
-
MD5
b7d1517079f77ee36b60f0b1cf14d764
-
SHA1
2af5b0a8686052ecec16bbf093dab75dfb8affa4
-
SHA256
0be80acea79b8ec54f3ef80588b8acd42670ea284c6154dbd1e0338b04dd38c9
-
SHA512
4d3f56281c6d0b77050713b29c9df77c4d93a7cf57b60442b67281005aad3ab087c60249b8df284b6b32f58b0c5f373b4d19a61604109afeece2cc9dd47a7ba6
-
SSDEEP
12288:1Ma32T16+FmQtN/k1hAFRAqZUjSZ+Fhp5sXI+8lLg4:1L2T16+FmQtN/QAbMFhp5yI1l04
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b7d1517079f77ee36b60f0b1cf14d764_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b7d1517079f77ee36b60f0b1cf14d764_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
644KB
-
Filesize
644KB