Analysis
-
max time kernel
135s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
12/08/2024, 03:12
Static task
static1
Behavioral task
behavioral1
Sample
8d15ae5070b6af321f1f1df86d076bc4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8d15ae5070b6af321f1f1df86d076bc4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d15ae5070b6af321f1f1df86d076bc4_JaffaCakes118.exe
-
Size
24KB
-
MD5
8d15ae5070b6af321f1f1df86d076bc4
-
SHA1
f7f187daed1bafd65e67e90b55ae5101a31ee614
-
SHA256
b7ac36325a16c45ec271373ee9027e9c69cf2d5f1e023a9d98787b0d77df434f
-
SHA512
47afb53b64971b5f8f76bd262aae54d75fe35181c08ba0c149ce9d4abe6f4122596645115ceaea2ecc488145fc183bc7e3356142170126ef7fed2329a27f0ec6
-
SSDEEP
192:jpR+Gvywx7OgMVEisbpQhEuM7sclTfjyxtOrgQgtwEjBvPf1jufItepf:lvog/isbChF3wIH9juMepf
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8d15ae5070b6af321f1f1df86d076bc4_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4356 8d15ae5070b6af321f1f1df86d076bc4_JaffaCakes118.exe 4356 8d15ae5070b6af321f1f1df86d076bc4_JaffaCakes118.exe