Analysis
-
max time kernel
143s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
10/08/2024, 20:05
Static task
static1
Behavioral task
behavioral1
Sample
877ac194c821aade2da459e2f4ae1cec_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
877ac194c821aade2da459e2f4ae1cec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
877ac194c821aade2da459e2f4ae1cec_JaffaCakes118.exe
-
Size
731KB
-
MD5
877ac194c821aade2da459e2f4ae1cec
-
SHA1
b3b360aa662c5fe174a57e452ad022c4bd6fa9f4
-
SHA256
ebcec1f1d3510377377b482e618508d91e686614b90c2bfbb5567d6ecabd84b6
-
SHA512
9086b750825760afee39ba04ff3c0e23cf9acc7769ba001958a3b525c0bcca465fa156267f2a991398ea894de8e60382a48c87966643ce939e9ca8e1fe717d80
-
SSDEEP
12288:5oR+6xB4D67dW9B8Nd57UBwr/3EfZgqfJ/4n+z2f/5U4GOuLjLsP:5oR+2aD67dcwdm+r/0BvRw+z2JUD7PL
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 877ac194c821aade2da459e2f4ae1cec_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1216 877ac194c821aade2da459e2f4ae1cec_JaffaCakes118.exe 1216 877ac194c821aade2da459e2f4ae1cec_JaffaCakes118.exe 1216 877ac194c821aade2da459e2f4ae1cec_JaffaCakes118.exe 1216 877ac194c821aade2da459e2f4ae1cec_JaffaCakes118.exe