Analysis
-
max time kernel
140s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
14-08-2024 09:51
Static task
static1
Behavioral task
behavioral1
Sample
959709a91b002a048aad16aafc810f2a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
959709a91b002a048aad16aafc810f2a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
959709a91b002a048aad16aafc810f2a_JaffaCakes118.exe
-
Size
40KB
-
MD5
959709a91b002a048aad16aafc810f2a
-
SHA1
5b40bfabe7c254ce467fab483beab3f65b2ff085
-
SHA256
428f337ff85a3c0de0a37aff20ba32bfa88f5081380076bf5549c49191eaff0f
-
SHA512
7ae24ba28de452f5aaf7d671324b1a6a116cbd23de6341132a9c3f3f10a2cdee17eda80d81b83a3f2dd8a670913b3255b5dac709590262fbc0a248c3287ee755
-
SSDEEP
768:irTbrSSHdtEtiNcKJAQbO1nONRtNckMv7:i3brSOeS7KsnckMz
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 959709a91b002a048aad16aafc810f2a_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4480 959709a91b002a048aad16aafc810f2a_JaffaCakes118.exe