Analysis
-
max time kernel
131s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11-08-2024 08:39
Static task
static1
Behavioral task
behavioral1
Sample
89b5c1059183d6fb6858ef0d46822c6f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
89b5c1059183d6fb6858ef0d46822c6f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89b5c1059183d6fb6858ef0d46822c6f_JaffaCakes118.exe
-
Size
584KB
-
MD5
89b5c1059183d6fb6858ef0d46822c6f
-
SHA1
cf93bbfab7b367ecc1be587e0bc1cf944d7750c5
-
SHA256
19f649cd3ad6fbfe2c0da673f20ea9636b7d3d6eea392a42b1d04906c4ffb106
-
SHA512
f6bccb1b40ab4693ec7fd62fd14b491491e64ce924d41ec862ddfec8e9d10576a6a99870887a70ddc5f552f60fa3ba365b79480288c0a42cd7de73553dd547a6
-
SSDEEP
12288:bGoD/3ZRPEdrLDxIuoNa3UoVUHjw6cH5l+zMeKVnuqpkKI5pRS4h0zhFxh:DjPyrLD1oNaew6I5IYeKVXkKcS4hs
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 89b5c1059183d6fb6858ef0d46822c6f_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4776 89b5c1059183d6fb6858ef0d46822c6f_JaffaCakes118.exe