Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
26/07/2024, 20:50
Static task
static1
Behavioral task
behavioral1
Sample
75ab6ec6457bddeeccd3b62b8465987b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
75ab6ec6457bddeeccd3b62b8465987b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75ab6ec6457bddeeccd3b62b8465987b_JaffaCakes118.exe
-
Size
24KB
-
MD5
75ab6ec6457bddeeccd3b62b8465987b
-
SHA1
2cbdb87b7ad8cb7a49ebecbd762ff38ebce343db
-
SHA256
bfc0ac7142f4f972e6d14caa562cc7517934b6a22c495024ffed72f60ded1420
-
SHA512
61ab2a678db18c91e2f79b1c644c0ade554a5d1d8d6d3430f60a925f2630fc4fb8ba64a4517b9115bf284f159941d741a796390c736f6bb2fe5b7cadbb220da3
-
SSDEEP
192:ne+EX1gvd1VTTLzKGGQMFhgHAmqVjqPNszv1f+eVp8LPB959W31c99ucJ5KQkehI:nSX141w9gnu1+eabtbKQxzTEXCE
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 75ab6ec6457bddeeccd3b62b8465987b_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2640 75ab6ec6457bddeeccd3b62b8465987b_JaffaCakes118.exe 2640 75ab6ec6457bddeeccd3b62b8465987b_JaffaCakes118.exe