Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
23/07/2024, 20:45
Static task
static1
Behavioral task
behavioral1
Sample
68dd8d861459661b6c6fa3953990fe32_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68dd8d861459661b6c6fa3953990fe32_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68dd8d861459661b6c6fa3953990fe32_JaffaCakes118.exe
-
Size
156KB
-
MD5
68dd8d861459661b6c6fa3953990fe32
-
SHA1
87d8f4cc5a7d0926119a05ae8131bd1ecd899906
-
SHA256
3d27c6f06f95146f1c3d453541d36f44fc1cfddca543b5134a6e6d753e3aa783
-
SHA512
a96c0be68b511bb566b8ddc6416045bf62a8944545bc8ea8218dc1316537db36df0b3c9978d5a683f2fe0c75bea04ea914195281fc1ecfdb0d14c543b911689f
-
SSDEEP
3072:yqz/2AxbuWBgUJAxmnV6Dky53N5AGf6gyDUQNatkb9:yqz/NoWBgUbV8753N5ZfxyQPY
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 68dd8d861459661b6c6fa3953990fe32_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2680 68dd8d861459661b6c6fa3953990fe32_JaffaCakes118.exe 2680 68dd8d861459661b6c6fa3953990fe32_JaffaCakes118.exe