Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
26/07/2024, 23:34
Static task
static1
Behavioral task
behavioral1
Sample
7635c36ffaec091294dd67be7146f213_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7635c36ffaec091294dd67be7146f213_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7635c36ffaec091294dd67be7146f213_JaffaCakes118.exe
-
Size
24KB
-
MD5
7635c36ffaec091294dd67be7146f213
-
SHA1
10774c53b757c0ddfd2469295acdb8280e98b384
-
SHA256
ed53a033a07805071c8b9e5a32ce6700a9bccfa59b7142e3bfd9d232029dc250
-
SHA512
311f94d8e8222a18d929cfea16e7b8e539ba3c6551840d23a98455bb84cdf31658e95d2525ca6feb6290c14cd39401a8f268ca0b68be7215cb7763b47b2c708b
-
SSDEEP
192:/TRo8kt/CONlqDuOt0PdbU0LJRZCBxf/9vTp0FuDU4kqeI:/Thkt/1lLFpq/rpFDU43eI
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7635c36ffaec091294dd67be7146f213_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2276 7635c36ffaec091294dd67be7146f213_JaffaCakes118.exe