Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
17/08/2024, 21:15
Static task
static1
Behavioral task
behavioral1
Sample
a42994c3e76c5f1b373ba5786cfc4cd3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a42994c3e76c5f1b373ba5786cfc4cd3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a42994c3e76c5f1b373ba5786cfc4cd3_JaffaCakes118.exe
-
Size
16KB
-
MD5
a42994c3e76c5f1b373ba5786cfc4cd3
-
SHA1
2852f1a4bf740e73958714a93caf55b27de9981f
-
SHA256
b53ecd994d7d79f73286cc3701c9e6acebbdac2614482369b2982279a382454d
-
SHA512
9c2c23b9a41bcf415291e75a61879b03bacb7dc45cfc8b51a2a0922a1137f5374742ea5551b0671c7b75fc72a182ba9e8753db313e5e0e9ffe848ec36617f3f3
-
SSDEEP
96:IOB+Ewb0651zCKVlALm0N+RuN9PQ+lPOUFblYh+cBORtX8opr6HYR/iKP/M2F9x9:os2EKLWm0R9jO2e0HMOLoq
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a42994c3e76c5f1b373ba5786cfc4cd3_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2312 a42994c3e76c5f1b373ba5786cfc4cd3_JaffaCakes118.exe