Analysis
-
max time kernel
149s -
max time network
114s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system -
submitted
02/08/2024, 03:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe
Resource
win7-20240708-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe
Resource
win10v2004-20240730-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe
-
Size
44KB
-
MD5
82d74dd138f447dc36bf2d207b9bc4df
-
SHA1
90ffa1f36492b41488a92de0b3d2f0804c103218
-
SHA256
4455a4cf0af67a863099578873a3f1971b88c9a3981e17a99c7981a5368dc744
-
SHA512
0904a733c282dbdcb0fce2a8943a3400a2eff81f3b7ab1a0686b2424177034ae80f2bb332b20105bad8239201de14888f2593a81971009949a849083c09f7db5
-
SSDEEP
384:4xtroQVsQBg9oCwKo6JBiFTtp2yLpJulTmslOITyKZhoq//R:E7s4gtHcwGpMTmscIeyd/J
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe 2632 82d74dd138f447dc36bf2d207b9bc4df_JaffaCakes118.exe