Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
01-08-2024 20:42
General
-
Target
81c17be5d436271db9cb640293483c43_JaffaCakes118.exe
-
Size
576KB
-
MD5
81c17be5d436271db9cb640293483c43
-
SHA1
96c9fd9b955db3c04aa393985a7031c53e49e1e1
-
SHA256
cc49c75693cf8cf30285f7573864c33e8dd35ab46f059f1304109226a3a4ec07
-
SHA512
cca7f01bc497bd10b02cfd7892c11e69e64114243e5de03b82e9f3c7d47c2f708d9ee85725be9b630434e9f16e73d94f6425f737462795f87189831ac6044229
-
SSDEEP
12288:CpqYbefXhi6vdtsKwFUO8pGkVlKIa4dOq:C+h1bw+O8pJVlK8dOq
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\81c17be5d436271db9cb640293483c43_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\81c17be5d436271db9cb640293483c43_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx