Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
26/07/2024, 01:17
Behavioral task
behavioral1
Sample
72094ee4fa3fcb0e84d6ec497b2f8566_JaffaCakes118.exe
Resource
win7-20240708-en
2 signatures
150 seconds
General
-
Target
72094ee4fa3fcb0e84d6ec497b2f8566_JaffaCakes118.exe
-
Size
205KB
-
MD5
72094ee4fa3fcb0e84d6ec497b2f8566
-
SHA1
c8ab3d4f886dc628da4408a2279c84770646ce1e
-
SHA256
cf19448e454a5a1f8d01de1a0355f9ee791a32009c7ba4f83a5cd3f825deaf54
-
SHA512
689a55125943b62f2dfbca767e35dbd9158ce055d6f18ce2a90c634f801f3bd7860d0f11edf761f832722f83a706bcbefe0ebc44ae1d9148d1e56387cc45ba40
-
SSDEEP
6144:dyes+LCLVJGhKXJI7SwDrwjreoKvzTJz8dHHZVUoE9:oXACxUAI7PDMr/KHJKZVUoE9
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2692-0-0x0000000000400000-0x000000000046F000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 72094ee4fa3fcb0e84d6ec497b2f8566_JaffaCakes118.exe