Analysis
-
max time kernel
94s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
23-07-2024 15:56
Static task
static1
Behavioral task
behavioral1
Sample
683a34cef5761e720e31fd4d775ab176_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
683a34cef5761e720e31fd4d775ab176_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
683a34cef5761e720e31fd4d775ab176_JaffaCakes118.exe
-
Size
32KB
-
MD5
683a34cef5761e720e31fd4d775ab176
-
SHA1
89ace756ef7960f7ed056cb7ba17536082a45a2c
-
SHA256
b55b9b569b3bfc7678ddeb047d2d06d6fc2877fa635235dbae9c13f7e839109b
-
SHA512
77c1a464e7b0e6e81e2366b3e7e213bee3873d643280c1e227fa1c5008e16f64c9cdf34d7ca8d967865c59704667c3bfd0fc7aec01b84285038264d725c80550
-
SSDEEP
384:EPyQE1MVJnMRNusKxs9F9rcUySJouitCtTQS4Pn9M7E67TLm+DGSEP4ka:E6QxVJINdH9rrckXr4PE/B/k
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 683a34cef5761e720e31fd4d775ab176_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4820 683a34cef5761e720e31fd4d775ab176_JaffaCakes118.exe 4820 683a34cef5761e720e31fd4d775ab176_JaffaCakes118.exe