Overview

overview

7

Static

static

7

f5d966145c...18.exe

windows7-x64

7

f5d966145c...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f5d966145c4885d5e262048db4c463ab_JaffaCakes118

  • Size

    655KB

  • Sample

    240925-mz7nas1enq

  • MD5

    f5d966145c4885d5e262048db4c463ab

  • SHA1

    87467007c366c71c793413423c7ceea6bd5ea992

  • SHA256

    6fa9a927680e75982c97912ea9e9ce526f91400e64fe2029a42d8cf0476aae84

  • SHA512

    23d2df104b8dfc8668dcb3d14113608f75f044f5a377bf8ee1301c836e5978becaba97059ed980bdb661ddf9aa8adebfa9b8024cec0936ad286fadc791a877ba

  • SSDEEP

    12288:QnFDMY1TN6KbodaRrQKaiADLs3Smi6nTMKygVKrPRW1/t1woGa3wuSLWpX4S:QnFDMQTNT5rDKDI3f5lO+/t1wZUdpD

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      f5d966145c4885d5e262048db4c463ab_JaffaCakes118

    • Size

      655KB

    • MD5

      f5d966145c4885d5e262048db4c463ab

    • SHA1

      87467007c366c71c793413423c7ceea6bd5ea992

    • SHA256

      6fa9a927680e75982c97912ea9e9ce526f91400e64fe2029a42d8cf0476aae84

    • SHA512

      23d2df104b8dfc8668dcb3d14113608f75f044f5a377bf8ee1301c836e5978becaba97059ed980bdb661ddf9aa8adebfa9b8024cec0936ad286fadc791a877ba

    • SSDEEP

      12288:QnFDMY1TN6KbodaRrQKaiADLs3Smi6nTMKygVKrPRW1/t1woGa3wuSLWpX4S:QnFDMQTNT5rDKDI3f5lO+/t1wZUdpD

    Score
    7/10
    discoveryevasionthemida

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks