Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
12/08/2024, 04:09
Static task
static1
Behavioral task
behavioral1
Sample
8d42feb9ae2b3608aefd6040bd8e9d58_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8d42feb9ae2b3608aefd6040bd8e9d58_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d42feb9ae2b3608aefd6040bd8e9d58_JaffaCakes118.exe
-
Size
44KB
-
MD5
8d42feb9ae2b3608aefd6040bd8e9d58
-
SHA1
d7fd0023a3d0c99cf9f5e1fd9a5fda2df14bed30
-
SHA256
efa1044d1a8256b977c84493559eef487218631d32b4bda1195afc91eab2647d
-
SHA512
99019a0dac6cd8c5cf3a6ba05cfa1ce8647991a8dd0c83d706b566189e8b03ec63f391ee8b496fb83f91b2a123888cf4467b94dff84c91a0bff7a3e63b972dfe
-
SSDEEP
384:wGI1WlVS/7Mll8yoxqe8ynFrmTPGEZMnDiYqOHFEEAak3JAue8/RzYDz0S6n:wV0IgllU3ST+eMns8cX3e8/Bi36
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8d42feb9ae2b3608aefd6040bd8e9d58_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2772 8d42feb9ae2b3608aefd6040bd8e9d58_JaffaCakes118.exe