Analysis
- max time kernel
141s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
17/08/2024, 02:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a0df856a774e59444b035891817e3f88_JaffaCakes118.exe
Resource
win7-20240708-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a0df856a774e59444b035891817e3f88_JaffaCakes118.exe
Resource
win10v2004-20240802-en
2 signatures
150 seconds
General
- Target a0df856a774e59444b035891817e3f88_JaffaCakes118.exe
- Size 53KB
- Sample240817-cybjcssclh
- SHA256 246475f38a27965420edcaed36f3284852e69821f7fdd03e9afa26d8f3bcf5c8
- MD5 a0df856a774e59444b035891817e3f88
- SHA1 d89a5cb44387788a4878d7d0ed04b7d1bd171966
- SHA512 84db3772daa65fc524d54797382381898c37e269730f58fc1c5711771669dc19757a2f7c2383cefde0712ca0a08d870cc362096a0d6211cb6a1802034e4e10b8
- SSDEEP 1536:fOBdTosM2E59dmMHJbjTlNF/oJeFrtQXMIk+mHTJjl:fOBKq03mMH53OeRtQ8bftjl
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a0df856a774e59444b035891817e3f88_JaffaCakes118.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1052 a0df856a774e59444b035891817e3f88_JaffaCakes118.exe