Analysis
-
max time kernel
139s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
12/08/2024, 02:24
Static task
static1
Behavioral task
behavioral1
Sample
8cf137b7e3ac78e72a082d1d35751f20_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8cf137b7e3ac78e72a082d1d35751f20_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$0/basicscan.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$0/basicscan.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
General
-
Target
8cf137b7e3ac78e72a082d1d35751f20_JaffaCakes118.exe
-
Size
315KB
-
MD5
8cf137b7e3ac78e72a082d1d35751f20
-
SHA1
7a03082d266f04161c2c084df323b98da672d07e
-
SHA256
bd9e092836fa73cb64b6c8cb9cd9931674d5997b5c7efa46fac400cbb8a2ea92
-
SHA512
66320b5d3f4304c5ac317fcbcde5cf7f132a219e3d0bc79f8af0863fa840d70fe0e94860d6292f1c5639c6671e0b5acbd5a518b6218b3751d6b321ae7fccf38e
-
SSDEEP
6144:UeNC5BrTFwXw8RzImRJoGIbqaLjS36EtoDFxbjEZSdYecBDvUi:pYhTFwg2IbqafShtoMZSDcJUi
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8cf137b7e3ac78e72a082d1d35751f20_JaffaCakes118.exe