Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
02-12-2024 21:21
General
-
Target
ba3b625f480b272b7b471a53b9916a76_JaffaCakes118.exe
-
Size
1.5MB
-
MD5
ba3b625f480b272b7b471a53b9916a76
-
SHA1
bcfd209e49b2276be46db460c7458ca880342795
-
SHA256
dada9edc3e28c4d5aa642c0d4a050729991c1cbfa680f832e96666b6386b0a3a
-
SHA512
ba2d2b1b845eab52ce4b74bb3b607fff882559719c89fca9da977129431cc415b6b403d6ed3e3936ebb6d6082e0bdbaa2976f5d38d7f85a4ad009a41d207b609
-
SSDEEP
24576:SZERA/xwzKoC5A5mjkHh6knDU9YwC/u+eBjx94VrZ7mM5a0pYUA:SB6zm5JjkB/KYwC/Ct94Vrpm4Gf
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba3b625f480b272b7b471a53b9916a76_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ba3b625f480b272b7b471a53b9916a76_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
-
Filesize
2.3MB