Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
10/08/2024, 17:52
Static task
static1
Behavioral task
behavioral1
Sample
870e2d4a129f1dce9327eb9053d3791d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
870e2d4a129f1dce9327eb9053d3791d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
870e2d4a129f1dce9327eb9053d3791d_JaffaCakes118.exe
-
Size
279KB
-
MD5
870e2d4a129f1dce9327eb9053d3791d
-
SHA1
8f5e12ecc481cfe3938f69504d325e43e9af3c26
-
SHA256
b27f96bdb9ec570344f9138b463d5d4c4d349aa38cafb5a7c681b549b167ae64
-
SHA512
125873a364490d3fed44f24f91ef033e6ca9654742cd58b24a0d4ca88dec5976c0979c10ecb799998351fb58166b01865a764ae42a90f1cea5b1de57a4e37276
-
SSDEEP
6144:tEYZeuUvp1azt1vGgXB0Snyr51aBpBX20Yexsj6lBK55RIDMxcVJ0:feuUhUzt1vGgXB0Myl1ajZYbj6lBuvIm
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 870e2d4a129f1dce9327eb9053d3791d_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1036 870e2d4a129f1dce9327eb9053d3791d_JaffaCakes118.exe