Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
25/07/2024, 17:58
Static task
static1
Behavioral task
behavioral1
Sample
70a640f3eed344ded28bde7f59dce6d2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70a640f3eed344ded28bde7f59dce6d2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70a640f3eed344ded28bde7f59dce6d2_JaffaCakes118.exe
-
Size
16KB
-
MD5
70a640f3eed344ded28bde7f59dce6d2
-
SHA1
fea8b01518e21f3525ab1fcd498b75958e3c2d88
-
SHA256
91d9cb87d4f339bffec14473259a03999cef7a66f6c68f6b5ac6f085fb717638
-
SHA512
877ff0749038c8127ac4bf28d0937eddcdb5ea62dad070aa0a028e035542056e56d1cdf0006e198273908d7819abef24d4b4ce63cb692e3eee2dc3c618e57b41
-
SSDEEP
96:/lxFfo66ca8ger5LC4Bb94qLW7CZFqWAchdek4XIqKgr2:/Tu6mrmhxblK7OFqWlhz44qxr
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 70a640f3eed344ded28bde7f59dce6d2_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2536 70a640f3eed344ded28bde7f59dce6d2_JaffaCakes118.exe