Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
14/08/2024, 14:10
Static task
static1
Behavioral task
behavioral1
Sample
966a5097ea5379923dce843ff7341c4b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
966a5097ea5379923dce843ff7341c4b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
966a5097ea5379923dce843ff7341c4b_JaffaCakes118.exe
-
Size
96KB
-
MD5
966a5097ea5379923dce843ff7341c4b
-
SHA1
60140e77f03ace8ecc0a1f2e5f9f67d661b3c993
-
SHA256
bea5d7f0687fd53d1e45c99de47d883f9cf1bd0a8a65721681d526db460a0fb8
-
SHA512
a088840986ebca13ea2935f9e92395f255dd821a38230c9d36a0576bfd7eefb9b6bc5cd70a77d6658579b1afe91a8a6959ab007be5d2f7e1bfd5e3df916d857a
-
SSDEEP
1536:HwVe08Q3YWWa1QzLO5Lt8RnBGQYWVmB6hjzsqEgFRGm5aKkACWTO2pWnMDs9:QVeksaEFBG1WL9XaNLM0
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\myname.dlx 966a5097ea5379923dce843ff7341c4b_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 966a5097ea5379923dce843ff7341c4b_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2420 966a5097ea5379923dce843ff7341c4b_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\966a5097ea5379923dce843ff7341c4b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\966a5097ea5379923dce843ff7341c4b_JaffaCakes118.exe"1⤵
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:2420