Analysis
-
max time kernel
94s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
29-11-2024 06:07
General
-
Target
af5d0181fbeb90324537ded8e893c4b9_JaffaCakes118.exe
-
Size
987KB
-
MD5
af5d0181fbeb90324537ded8e893c4b9
-
SHA1
278a04591af1247e7619a37afc8c7ec7f5821866
-
SHA256
195fa3d7078b6a501af6ac1316dcffb4e02e58b864ff5b6f18ca5849dc586f2a
-
SHA512
83a6e0d0ade376d5fc6230bdd4e873a9a35c21570ac0a75e68896a421cbac17a4db4c44f0d9a2f17045fa1313551e88f3089abf9c09b9716afacb6694241cbcb
-
SSDEEP
24576:IeZaxci99NY+ueca57Y95pj11x8jSpQIeBho:l0xci9jrFp6j1wepZeBho
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\af5d0181fbeb90324537ded8e893c4b9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\af5d0181fbeb90324537ded8e893c4b9_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
-
Filesize
2.1MB