Analysis
-
max time kernel
149s -
max time network
109s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
17-08-2024 18:29
Static task
static1
Behavioral task
behavioral1
Sample
a3a67ed6a65f3b679f77a769fc954a5e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a3a67ed6a65f3b679f77a769fc954a5e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3a67ed6a65f3b679f77a769fc954a5e_JaffaCakes118.exe
-
Size
16KB
-
MD5
a3a67ed6a65f3b679f77a769fc954a5e
-
SHA1
76f1b4a57b2a1aaf93cfe0746c6327821f46a7f9
-
SHA256
f11c89d4f79f64086c985a1081ec1062d4b2a06dc205b2aa0bc7b0a0e4c4aa36
-
SHA512
02a88a2e063de00c730353938b9332aabe247c259c95dd9c2eee09ecb4168a4f7a48aad1635af39a8367b5215639246d3949d9c8142ebc663f389c6ed3c46adf
-
SSDEEP
384:p0wcY9YvenSOcZUWGCgp1ffoMsvAEA/Am/O:wFeWGx1Ho5A//
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Windows update = "@)@" a3a67ed6a65f3b679f77a769fc954a5e_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a3a67ed6a65f3b679f77a769fc954a5e_JaffaCakes118.exe