Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
23-11-2024 20:39
General
-
Target
90894ba199f267180441cf346724dd9f_JaffaCakes118.exe
-
Size
3.3MB
-
MD5
90894ba199f267180441cf346724dd9f
-
SHA1
e93d0de39c2dc787457a97573f859319bb630aa9
-
SHA256
b02b4c50db90f2a4531a57b41ddda2ca8381d56f59f135322a57ba4aaa548b83
-
SHA512
fc5dc8b66fff9394c639366ff36884a95f2b9e5a6065817dff64c600b998cee226c02393a1c7f0a8ca814a27ba6114e1fbca96948ec46452f58ba35c245114f7
-
SSDEEP
49152:hyiTcnfEY94d+21EWMLJpH6uBmBKyGq2llf5i:sTnfEDd+UEWqj6usKRllY
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\90894ba199f267180441cf346724dd9f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\90894ba199f267180441cf346724dd9f_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.8MB
-
Filesize
1.0MB
-
Filesize
4KB
-
Filesize
6.8MB