Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
14/08/2024, 17:36
Static task
static1
Behavioral task
behavioral1
Sample
97054f75d4d0b75669d6a83cfd4d3ac1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
97054f75d4d0b75669d6a83cfd4d3ac1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
97054f75d4d0b75669d6a83cfd4d3ac1_JaffaCakes118.exe
-
Size
120KB
-
MD5
97054f75d4d0b75669d6a83cfd4d3ac1
-
SHA1
675580d97d6845f3f20d0f44386ac42e4d518817
-
SHA256
49237d2d5423b6e4a870e68f45e12890d40ac6b5ab8aaabfb2a1ffdbe53265c8
-
SHA512
d42bd409016e9956940a812c23a2de0061e4211cd08f609ed04221e867d759cbe258ddb5e84f07992862f346ccc8bede58306ac4e6f9fbce1537a30bfab0eb0f
-
SSDEEP
3072:9CXxLG0eIKu5EaBomawJi096+bocEXbVzoi12g:qIlmd9BolZ919
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 97054f75d4d0b75669d6a83cfd4d3ac1_JaffaCakes118.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1772 97054f75d4d0b75669d6a83cfd4d3ac1_JaffaCakes118.exe