Overview

overview

7

Static

static

7

feb5fe2538...18.exe

windows7-x64

7

feb5fe2538...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    feb5fe2538816ff40f62b6fa3266eaad_JaffaCakes118

  • Size

    2.1MB

  • Sample

    240929-rpy1maxfpp

  • MD5

    feb5fe2538816ff40f62b6fa3266eaad

  • SHA1

    0274ad6c83f39f7d05fc3bab86f57b14fd040c26

  • SHA256

    9f068930ad96c6b6bf3726752840e6e0bcee336c2b46e5ff9e047fbf506aae0a

  • SHA512

    8f2192dc0f7b885474d8393042ce74ee2e3790baa939f0b74cb9f274e116d96b5f22b9115b961172a154c0da9b07bb9e9208944daa988df21c8bcbbe7476c31f

  • SSDEEP

    49152:dQKQJHtvuAR97Kc5OM1sQoT4rOKhjuqTSN4jw:6KQJHtD775xsZ4rO2SEI

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      feb5fe2538816ff40f62b6fa3266eaad_JaffaCakes118

    • Size

      2.1MB

    • MD5

      feb5fe2538816ff40f62b6fa3266eaad

    • SHA1

      0274ad6c83f39f7d05fc3bab86f57b14fd040c26

    • SHA256

      9f068930ad96c6b6bf3726752840e6e0bcee336c2b46e5ff9e047fbf506aae0a

    • SHA512

      8f2192dc0f7b885474d8393042ce74ee2e3790baa939f0b74cb9f274e116d96b5f22b9115b961172a154c0da9b07bb9e9208944daa988df21c8bcbbe7476c31f

    • SSDEEP

      49152:dQKQJHtvuAR97Kc5OM1sQoT4rOKhjuqTSN4jw:6KQJHtD775xsZ4rO2SEI

    Score
    7/10
    discoveryevasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks