Analysis
-
max time kernel
14s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
02/08/2024, 05:21
Static task
static1
Behavioral task
behavioral1
Sample
832f1edcfbab90790cbc99028f2b06af_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
832f1edcfbab90790cbc99028f2b06af_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
832f1edcfbab90790cbc99028f2b06af_JaffaCakes118.exe
-
Size
156KB
-
MD5
832f1edcfbab90790cbc99028f2b06af
-
SHA1
6be3689f060d8e179046c9b11a199f21330b14b6
-
SHA256
d01ac4503fc2f23276534b4cd43fb82afdddcb5dcee4ab4d983fbdefed2cd4d4
-
SHA512
c227a59e4de24c5e0c386a245d7e143b43cc54490a00ee6c1f4983ec99fb43df6e568587aa01a18051544b92d4f69aa508a0e268496423cede3c6d4a6c66502f
-
SSDEEP
3072:lc5PDyBx61V2hypK7D6zdX3+P+kdMTqF/oc6:lF/W
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 832f1edcfbab90790cbc99028f2b06af_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2776 832f1edcfbab90790cbc99028f2b06af_JaffaCakes118.exe