Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
27-07-2024 07:13
Static task
static1
Behavioral task
behavioral1
Sample
77537daea5faef7ff90a9122735c4668_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
77537daea5faef7ff90a9122735c4668_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
77537daea5faef7ff90a9122735c4668_JaffaCakes118.exe
-
Size
88KB
-
MD5
77537daea5faef7ff90a9122735c4668
-
SHA1
7eaeb359807da8e2e23935964375363e7d7e0afb
-
SHA256
74faa24c6b39fe0b8b8d3a76003af7b03f505309622bc0f5f4991a3fcd4621ff
-
SHA512
1a4270880345d8c4b781d4f3484db43e70b8d67dfcb8e88696cb9ef72687309641dd8f95de9153391a552f4ebe4b8fdad0271c00f39c731ef0d8d51b9e471315
-
SSDEEP
1536:7OpQr95KO4gaXBKW/iYVh0SfRYZbatMnFyP6mSBFtq:6QrKNZnc2tQFyP6mSBW
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 77537daea5faef7ff90a9122735c4668_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2228 77537daea5faef7ff90a9122735c4668_JaffaCakes118.exe