Analysis
-
max time kernel
101s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system -
submitted
01/08/2024, 21:45
Static task
static1
Behavioral task
behavioral1
Sample
81d70f7ecb3d755b4605baf6e56ac566_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
81d70f7ecb3d755b4605baf6e56ac566_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81d70f7ecb3d755b4605baf6e56ac566_JaffaCakes118.exe
-
Size
543KB
-
MD5
81d70f7ecb3d755b4605baf6e56ac566
-
SHA1
0a40191cd627b58680a2451712aac3e027d93705
-
SHA256
927b42b7797c20988b720ce9292475631c34cbe56a6e2141e95100bf777302e2
-
SHA512
f6ee5c973e95157f4cb2f278cbe3ae1c23d5665d847907720571da786e26f71dbf75618d862fa9971fe9c73afd0dd6b0baa15b5fe1106de69a0936bdeca83dc8
-
SSDEEP
12288:p2pe+rAiFLzV60LqEiJmoZttdZt+0xV3p+t0P:pmefiVzV60LqEiJmUoq
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 81d70f7ecb3d755b4605baf6e56ac566_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1660 81d70f7ecb3d755b4605baf6e56ac566_JaffaCakes118.exe 1660 81d70f7ecb3d755b4605baf6e56ac566_JaffaCakes118.exe