Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
12/08/2024, 05:40
Static task
static1
Behavioral task
behavioral1
Sample
8d876d3a82ec939921d453c863feb630_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8d876d3a82ec939921d453c863feb630_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d876d3a82ec939921d453c863feb630_JaffaCakes118.exe
-
Size
56KB
-
MD5
8d876d3a82ec939921d453c863feb630
-
SHA1
293de75d68ccbb813d3cc30c37afd74a3ae50a9f
-
SHA256
2fd4e58db9abd333a1e03f5618f39f2dfafe87bdc5da2d6bc5a19d197695c4cd
-
SHA512
b4b2d7dd2630e6c09b5a2bbaaae38121fb3a1ed5028334aa4d3401b1b07bd2e589d2116541c8cc95cac34906187cab5d63598bcae15a78097b0546fcaf949a27
-
SSDEEP
768:hKjgQAmHxxBLRp+MyUYEiDeQPB/moJRnOfmqnrAtsG5ZILE2UrlFR3uJjq2Zp:ocmHVRp+MdYEiyaB/moJBO+ALfjq2Zp
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8d876d3a82ec939921d453c863feb630_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2796 8d876d3a82ec939921d453c863feb630_JaffaCakes118.exe