Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
10/08/2024, 22:35
Static task
static1
Behavioral task
behavioral1
Sample
87f244382481c01a1c4915af370fd099_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
87f244382481c01a1c4915af370fd099_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87f244382481c01a1c4915af370fd099_JaffaCakes118.exe
-
Size
244KB
-
MD5
87f244382481c01a1c4915af370fd099
-
SHA1
359579c8c09329873b02ca286dbef317ed4435d5
-
SHA256
7d0dffae8b4e7d7ecd3663b6f263a9fd9d9519dfc0d446c8ca4e25a9ddb913db
-
SHA512
2fc39c643d33f730fa394591128958003c968d73229117566c747a961456613ee0c12bcfd434a9d6adb57395ad0da19ef083ae0286f71e070581235107d15dc9
-
SSDEEP
3072:JJjWo2+2D2JKzCadXNdGyXPa5YrG2N2e2E:JjKzZXNdGyXS5
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 87f244382481c01a1c4915af370fd099_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2068 87f244382481c01a1c4915af370fd099_JaffaCakes118.exe