Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
24/07/2024, 02:55
Static task
static1
Behavioral task
behavioral1
Sample
69ff070b75a2321ec341ee33ac7125d4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69ff070b75a2321ec341ee33ac7125d4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69ff070b75a2321ec341ee33ac7125d4_JaffaCakes118.exe
-
Size
107KB
-
MD5
69ff070b75a2321ec341ee33ac7125d4
-
SHA1
dd1ef08902af0c652071bdcaf39ac707b16b03be
-
SHA256
57e16002c9be2db5759fb3388e864023d3dcc66924e695679657976ab58b0b58
-
SHA512
8c0117c428184c98f61f75bfed6eb3406d1fb8c3fd12f59150238dcbab0bc1ce3d30aaf6613067ecec96502f73a3be92c777ca6c32359804c3f477984c238c9b
-
SSDEEP
1536:nXNDkfbPF3IXHgyL9YZt2rgIktcwWVBilbncsGLCN1zI48zJ9obke6K6Q:nXBQYXEZWv3vWjJnwJdeEQ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 69ff070b75a2321ec341ee33ac7125d4_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 460 69ff070b75a2321ec341ee33ac7125d4_JaffaCakes118.exe