Analysis
-
max time kernel
146s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11/08/2024, 20:45
Static task
static1
Behavioral task
behavioral1
Sample
8be7b97632ae2e909790c646db178243_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8be7b97632ae2e909790c646db178243_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8be7b97632ae2e909790c646db178243_JaffaCakes118.exe
-
Size
186KB
-
MD5
8be7b97632ae2e909790c646db178243
-
SHA1
06a2c68d272e82150e29e12ccfbb3a83b4d303eb
-
SHA256
4a53858a012143363511546460ff8fef5735903c450a0d7ae5e9fab4372da1f8
-
SHA512
cb3722b9e239287270ac2c97f8d17a16cab290641b98352c689c457c7e1e5aa07facfbeb8fe9fb8ba844c84d2f39b18ef1ef61ee4a09dfb81625916744fe221f
-
SSDEEP
3072:fZp8WphHNd/wKX2pzVLmlJlIcEv+q3b2LUjVWoa9d6YisjU4ZZ4/GUKS4ktl8meE:fZp8Wphtd/wKX2pzV6hIl8ikoCYTsjLo
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8be7b97632ae2e909790c646db178243_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1084 8be7b97632ae2e909790c646db178243_JaffaCakes118.exe 1084 8be7b97632ae2e909790c646db178243_JaffaCakes118.exe