Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
13/08/2024, 16:11
Static task
static1
Behavioral task
behavioral1
Sample
93cf0aade25093afcae84f0486130e3f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
93cf0aade25093afcae84f0486130e3f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
93cf0aade25093afcae84f0486130e3f_JaffaCakes118.exe
-
Size
9KB
-
MD5
93cf0aade25093afcae84f0486130e3f
-
SHA1
05617e83c0beaf668cf2310805aaa8caf7a68f05
-
SHA256
bc2f90e38283a65aa6abe0cadf22c2102fa5f611e3ea79c488b01a8e7b0342b7
-
SHA512
3752edf7ff19dd408b1d5baf024ee44d3d3a1445fe2ea14964a8ce4b438aeff276417367cb7ec8847c3d5d21cdd50638b381a881bcb578ab403b06fb1d1017b6
-
SSDEEP
192:K8zAegBV5kHhBrtwp3p39yfYlEV2Pna4kvbYpGfE:KleZhBrWZN1lsDTYpG8
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 93cf0aade25093afcae84f0486130e3f_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1916 93cf0aade25093afcae84f0486130e3f_JaffaCakes118.exe