Analysis
-
max time kernel
14s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
26-07-2024 21:10
Behavioral task
behavioral1
Sample
75bc81c54ce280022e22315faeb4d7bf_JaffaCakes118.exe
Resource
win7-20240705-en
windows7-x64
2 signatures
150 seconds
General
-
Target
75bc81c54ce280022e22315faeb4d7bf_JaffaCakes118.exe
-
Size
2.0MB
-
MD5
75bc81c54ce280022e22315faeb4d7bf
-
SHA1
95e1a7e5d5df4ca1d043fefc803b6602cedf1842
-
SHA256
1d7d93bb55b7ea80c200cc2ae19cbaf5a2f355a6b05ec9db3d23873a5b65cb99
-
SHA512
1f899cc9c31d341f233334c8b2f538185885cbd16ecfc16e2d280ff637d28cb73c7c2de3b2fc843f027640489e8cefbd480c9185962c9902a688ff969a3eb57c
-
SSDEEP
49152:KNv3n17rV/Q7S3pjslCmCbFOTBWgS/6Y9c2wajrPiAXrmV:KN/nXQ7ejsl5C4TBO/LRwajrPFrU
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2260-0-0x0000000000400000-0x0000000000429000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 75bc81c54ce280022e22315faeb4d7bf_JaffaCakes118.exe