Analysis
-
max time kernel
140s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11/08/2024, 09:33
Static task
static1
Behavioral task
behavioral1
Sample
89dccdf8df75c20e28953fef365725e9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
89dccdf8df75c20e28953fef365725e9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89dccdf8df75c20e28953fef365725e9_JaffaCakes118.exe
-
Size
40KB
-
MD5
89dccdf8df75c20e28953fef365725e9
-
SHA1
74d011606cbcad83b9022ae432060d5065a2a182
-
SHA256
c8e7d9dcd111d0c20541416f5d12249f13033933701ba7a1b072a5adb4c93e97
-
SHA512
70989b9c11539f62ee735787f1f4d18839982d2eb45decb72fbe94005b61ae73fa13981bea50889684905c64b101b44cd9db98a3cdc73af76ceb9254f6991a4b
-
SSDEEP
768:1Cyh5LKbI7mg4FxU0IK+w4zQ7mtoAT+i0RkXBG:Mc+iaU0IK+wEt+ifG
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 89dccdf8df75c20e28953fef365725e9_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4772 89dccdf8df75c20e28953fef365725e9_JaffaCakes118.exe 4772 89dccdf8df75c20e28953fef365725e9_JaffaCakes118.exe