Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
01-08-2024 20:51
Static task
static1
Behavioral task
behavioral1
Sample
81c277663166b9c4c047e43b22b07efa_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
81c277663166b9c4c047e43b22b07efa_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81c277663166b9c4c047e43b22b07efa_JaffaCakes118.exe
-
Size
68KB
-
MD5
81c277663166b9c4c047e43b22b07efa
-
SHA1
894f9f00b4c15644a6c4cf9926a7469759526e72
-
SHA256
a547176fda80a8e57e405baae9a4609f9d8b2fc97dddc1f752bafd384add4bcc
-
SHA512
6d0caf581118b811a121116f0d9b9aff90cb840a7194da39f43e251c930dcb16c5b5533706320998f6b8167e7077329209cb7eeadeec6d044b67cb6c5e0e7d51
-
SSDEEP
768:7yNbUy26Tbo3P9Ppt0Y6qjjKf7BhRZAOtSfqFLRPflsbAaYyEdWrWn63ADAqI7q3:GNbUkTboaAiJyEdWrN3AD7ImvJ5
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 81c277663166b9c4c047e43b22b07efa_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 448 81c277663166b9c4c047e43b22b07efa_JaffaCakes118.exe