Analysis
- max time kernel
133s - max time network
102s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system - submitted
24/07/2024, 03:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6a06c2f7ee1f2c2f3fb5ef389016ffb5_JaffaCakes118.exe
Resource
win7-20240704-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
6a06c2f7ee1f2c2f3fb5ef389016ffb5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
- Target 6a06c2f7ee1f2c2f3fb5ef389016ffb5_JaffaCakes118.exe
- Size 392KB
- Sample240724-dmktbsvdnl
- SHA256 eec9bd8bb71209e9876c4cad62afbad68d0e9eb90b6f4e957d2ced59f3da3c9e
- MD5 6a06c2f7ee1f2c2f3fb5ef389016ffb5
- SHA1 c2b91e91f129c871dcae963258b53238cdcd09a7
- SHA512 fd51efd7bed16e15f43666a7421827c1f64d2bcda4d2e7652844547839764411040cca5ccbceb7fff3dffdee160b29293fb96553f8a1345c26282147178043bf
- SSDEEP 12288:CJQp0Z3aEHMgDZnxaTu+4cc2N/97rw9AGHdNa:xmqEHMgNTnS7rw9AGq
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 6a06c2f7ee1f2c2f3fb5ef389016ffb5_JaffaCakes118.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2732 6a06c2f7ee1f2c2f3fb5ef389016ffb5_JaffaCakes118.exe 2732 6a06c2f7ee1f2c2f3fb5ef389016ffb5_JaffaCakes118.exe