Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
12/08/2024, 07:43
Static task
static1
Behavioral task
behavioral1
Sample
8de4346117703705eb93a69591fe9c63_JaffaCakes118.exe
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral2
Sample
8de4346117703705eb93a69591fe9c63_JaffaCakes118.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
General
-
Target
8de4346117703705eb93a69591fe9c63_JaffaCakes118.exe
-
Size
93KB
-
MD5
8de4346117703705eb93a69591fe9c63
-
SHA1
0bfec5e172330c4cbd218b0ab9e5e15ccc8e7d80
-
SHA256
7c243ca867057cf7092d54cb9f215bce1645ca66aee01c81c1920f8a55ec0304
-
SHA512
49382d202935fca26ce9e9f04d187b91b87ae703c568b90180f21cb29a9f403483bac6451d16ceeaabfd958729e14a5604c437c14f765fb3ba956f4b70e0de1f
-
SSDEEP
1536:u9rHhdsDgwngaXfZcUEPHR+ZFdx8Ys0dD+j+sQ6Pr1fvIKEdTzuhOChC38usHfJs:grHhdsUtgZZEPHR+Dd2Yz1g+sQ6Pr1fO
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8de4346117703705eb93a69591fe9c63_JaffaCakes118.exe -
Suspicious behavior: LoadsDriver 64 IoCs
pid Process 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found 656 Process not Found