Analysis
- max time kernel
93s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2024, 00:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a32852935547816d67c069a9c74bcc10_JaffaCakes118.exe
Resource
win7-20231129-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
a32852935547816d67c069a9c74bcc10_JaffaCakes118.exe
Resource
win10v2004-20240611-en
3 signatures
150 seconds
General
- Target a32852935547816d67c069a9c74bcc10_JaffaCakes118.exe
- Size 191KB
- Sample240613-avdhfa1brr
- SHA256 ebfed6c9d4ba86a9a248020e3c69ef0a1a02e3feca0701a6923d0a52429237d7
- MD5 a32852935547816d67c069a9c74bcc10
- SHA1 d2768144ad70fc2cd12c83e646b94a57fe6a5310
- SHA512 37dd9861fe4f677482026682de2d53dac4ef88e7f4103fc0dbd768db90a6c08284a517b9729ccd6bf873004abd3b798440cf4dd087ffe7c82c5b5b7b19bacb6c
- SSDEEP 3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dJ:HAVySV1eY4k437d+4wkTHdS2R
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-3169499791-3545231813-3156325206-1000\Control Panel\International\Geo\Nation a32852935547816d67c069a9c74bcc10_JaffaCakes118.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 208 a32852935547816d67c069a9c74bcc10_JaffaCakes118.exe