Analysis
-
max time kernel
137s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29-08-2024 05:21
General
-
Target
c848fd6b8b324c46153f70c69546c2f1_JaffaCakes118.exe
-
Size
1.8MB
-
MD5
c848fd6b8b324c46153f70c69546c2f1
-
SHA1
c0d4c7a07d60ed2de61c24ff675204b98b5d80d3
-
SHA256
3ef9bad8dbc9becb39a3c0242d2a835258eb4f215173065eed4f3a33fa0a8eb0
-
SHA512
95c6a1b55c602948fb7bc5eee334abbff70476a4ab9d8f06076d00e23a5b3dec7b9baa4d8858a79c6cec1a7b82f49430d7ff3fb356dc0026cfe5265f7da94615
-
SSDEEP
49152:qWYtqRnAbOgZeESc/ZRu2IdhoCm4E4rf07PG2Z:qpulgkEL/m/mSwbGE
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c848fd6b8b324c46153f70c69546c2f1_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\c848fd6b8b324c46153f70c69546c2f1_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
1.8MB