Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
11/08/2024, 00:55
Static task
static1
Behavioral task
behavioral1
Sample
885cdea155b9d4222de0b09e1462efff_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
885cdea155b9d4222de0b09e1462efff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
885cdea155b9d4222de0b09e1462efff_JaffaCakes118.exe
-
Size
544KB
-
MD5
885cdea155b9d4222de0b09e1462efff
-
SHA1
1bdb51077ad827b39df80b45e2bd68fb2ccbe300
-
SHA256
f4093c6cf994582ff41e0910a40375765ae903f0dbcebc366938f9e851db14ae
-
SHA512
83b235d794eb9656561c545d9f4c78ce05f8a373b510cf0779dd08d54761d12b65eb2fe2c6473d3e45f2543dd823ded1f88555a08e0df1cadd5acaa94cada473
-
SSDEEP
6144:mmmOz5OnT/BRyfkW5VFZpn5osCyf58ubedO8Ddu/GYvTAfBw20NcjQqW:kkOnz6fd7D5Kxo/GYvEBw2Kcj
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 885cdea155b9d4222de0b09e1462efff_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2528 885cdea155b9d4222de0b09e1462efff_JaffaCakes118.exe 2528 885cdea155b9d4222de0b09e1462efff_JaffaCakes118.exe