Analysis
-
max time kernel
107s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
12/10/2024, 19:41
General
-
Target
3bbf21d8a0eb388af1b8c4b7667ab6ac_JaffaCakes118.exe
-
Size
1.4MB
-
MD5
3bbf21d8a0eb388af1b8c4b7667ab6ac
-
SHA1
5faf3b155c45f290140b4feb50cdd3761ef7e707
-
SHA256
ee31b7ff2b2d5c9b27cdd5afbb10926efb46e775fa4554e95edc151d08f34b1b
-
SHA512
61950fdcbd9ba442fce5f59004201de49a091bdc526a96ce220f45642dab0f6d91bd82ff14ac8c3b5e69d8ee8f65e468ac97f7f9148208a6ee79bf65d891d22a
-
SSDEEP
24576:QGZfci2ggRu8YLl2J34R8H7FzZk2iS9eSm3FAJ8uhpm2ugDbZ0T6QmlSAI+:bCRu5l2k8HxVkdcelF92mngv2TXmlC
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3bbf21d8a0eb388af1b8c4b7667ab6ac_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3bbf21d8a0eb388af1b8c4b7667ab6ac_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.2MB
-
Filesize
3.2MB