Analysis
-
max time kernel
99s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
14/08/2024, 18:03
Static task
static1
Behavioral task
behavioral1
Sample
971b87151fb87a8ecb27dc37e53dfe6b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
971b87151fb87a8ecb27dc37e53dfe6b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
971b87151fb87a8ecb27dc37e53dfe6b_JaffaCakes118.exe
-
Size
125KB
-
MD5
971b87151fb87a8ecb27dc37e53dfe6b
-
SHA1
071e4003942e174936a523bf18fb80d352a866e8
-
SHA256
c8fd263ca09e213df1699960970a3c2f3c059ba7823fc766cc2a1ea65c162edf
-
SHA512
1044b33f0152c1cd911ea1d4a57d5d4fbcfdfe7b7ccfe1d3751e47ba09701302201f6f2b2a02430c0379ff8aeefb8bf440c808ad3c10d4d4976d5bdfb738d925
-
SSDEEP
3072:sCXxLG0eIKu5EaBomawJi096+bocEXbVzoab12x:fIlmd9BolZP1k
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 971b87151fb87a8ecb27dc37e53dfe6b_JaffaCakes118.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2876 971b87151fb87a8ecb27dc37e53dfe6b_JaffaCakes118.exe