Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
14/08/2024, 08:44
Static task
static1
Behavioral task
behavioral1
Sample
9560083d64591bb85d3cf9ee9915c70b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9560083d64591bb85d3cf9ee9915c70b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9560083d64591bb85d3cf9ee9915c70b_JaffaCakes118.exe
-
Size
52KB
-
MD5
9560083d64591bb85d3cf9ee9915c70b
-
SHA1
12862799cf13a35f723c58226a0ca2f6fe1cb23f
-
SHA256
16d7aa809ea12cf706f8f4ebbbd2f20b22d8bf4f505cbf15038639e955edfd89
-
SHA512
a296bb081384c9ab51809fbfed460add52ec79a10a17750def750387de983b1b3a59063208739b452f1e469d69e6ec901c3d9100343180953911a4c07e4dedab
-
SSDEEP
768:7US0FqfJ55Cr0KuNRwFpVTcsraLOxt1QQC5O5wT212u:QFE558uNmfRjaQDr2u
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 9560083d64591bb85d3cf9ee9915c70b_JaffaCakes118.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2208 9560083d64591bb85d3cf9ee9915c70b_JaffaCakes118.exe