Analysis
-
max time kernel
92s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
27/07/2024, 13:06
Static task
static1
Behavioral task
behavioral1
Sample
7848f567c41a9261b488777bf9b08c28_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7848f567c41a9261b488777bf9b08c28_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7848f567c41a9261b488777bf9b08c28_JaffaCakes118.exe
-
Size
116KB
-
MD5
7848f567c41a9261b488777bf9b08c28
-
SHA1
136bd18683b45cc15db2025f3e39eb726c62c51a
-
SHA256
6e48248447c92a7aab3968b50b986dee8a8f3d9c1d9abc8ecc66457f0f713e3d
-
SHA512
8fd6381ae28482721dff241819ea4b59babebe5d0727e5fd442cb8b3084dd51c1f0e93a166a222b3ddb2f4fe4d621820e84f56f288a58fdf8ee3a78c3ca31096
-
SSDEEP
3072:bvZBozTdnQOz1a+zod4nuxeM/Cd1eOCa7rRH:FOzJnQOz1a+sd44esCd1eOC4N
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7848f567c41a9261b488777bf9b08c28_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3772 7848f567c41a9261b488777bf9b08c28_JaffaCakes118.exe 3772 7848f567c41a9261b488777bf9b08c28_JaffaCakes118.exe 3772 7848f567c41a9261b488777bf9b08c28_JaffaCakes118.exe