Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
02/08/2024, 00:46
Static task
static1
Behavioral task
behavioral1
Sample
826436f3efb05c4d606e2946297d4a55_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
826436f3efb05c4d606e2946297d4a55_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
826436f3efb05c4d606e2946297d4a55_JaffaCakes118.exe
-
Size
104KB
-
MD5
826436f3efb05c4d606e2946297d4a55
-
SHA1
fc6cc45f7e43e5f338774a2f432fd857cc7f5206
-
SHA256
30c4577150121f632814001a3f0c08eedd6b454f59655c43c32c7f4a7b6f5079
-
SHA512
2e8d6134428e5c00755162010157631c4824ccb356ce89c8d63dd2fb0e9ad70214ba56eb7e370f8db7ad7f97666ada6887d01e8a1adf5d3013f3cbdd3e63e9dc
-
SSDEEP
3072:72BcxBnvGT5o3mPGXRjlHAIozCo2kGSyPYYL0IYYCAk+tJqqRVKIozCo2kdtHJVF:7NvvGT5o3dAIozCo2kGSyPYYL0IYYCAb
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 826436f3efb05c4d606e2946297d4a55_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3004 826436f3efb05c4d606e2946297d4a55_JaffaCakes118.exe