Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
14-08-2024 19:40
Behavioral task
behavioral1
Sample
97679f787e049f11be7c5581331f3409_JaffaCakes118.exe
Resource
win7-20240705-en
windows7-x64
13 signatures
150 seconds
General
-
Target
97679f787e049f11be7c5581331f3409_JaffaCakes118.exe
-
Size
797KB
-
MD5
97679f787e049f11be7c5581331f3409
-
SHA1
84f1e7d2a4151a923bfaeaa6e0bb8d9c732f7ac1
-
SHA256
48cd674b96b87b4d3fc2e00f398d745b654145bc9293b566586172b1b1742d8f
-
SHA512
f08a1af66c836010b14cb9aad88d45b01cb3e070b28f20f89cba8aa77ce4ca221a7b77e66102fac4ebc1b3da92657c19bd1283d92b036ae31782dbceb857c665
-
SSDEEP
12288:euHdXrInRbM09MFlxFjr3Np7/ZqOVr21HoVHBtLHn/LiBPWHBnIbjgJoS:xdXaRb/M/1V4KjGBPB
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3136-0-0x0000000000400000-0x00000000004C9000-memory.dmp upx behavioral2/memory/3136-1-0x0000000000400000-0x00000000004C9000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 97679f787e049f11be7c5581331f3409_JaffaCakes118.exe