Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
18/08/2024, 10:36
Static task
static1
Behavioral task
behavioral1
Sample
a67313f78fff2e39b50b82010987ec8c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a67313f78fff2e39b50b82010987ec8c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a67313f78fff2e39b50b82010987ec8c_JaffaCakes118.exe
-
Size
44KB
-
MD5
a67313f78fff2e39b50b82010987ec8c
-
SHA1
f2df72a3e9d8f3f392adc4a2f18c9704eded5ec3
-
SHA256
d8e3013a4e4cdbbdb477ddd28463faf29d33dc01cd9a9f3d70bda89cd63fc014
-
SHA512
d77d43a28c32f9c99f4d932b8336fa209b55d8268b661d092744bf8548b08b79243fafda8d38f87d7b2377b17b1dcbb415df34b76611f0c07381d59606fef447
-
SSDEEP
768:1IQkMAkMT0IUoLpCCdaD48BUL2JU1qza/4Y:1ZLMT0IUoLpFaJZzawY
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a67313f78fff2e39b50b82010987ec8c_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3064 a67313f78fff2e39b50b82010987ec8c_JaffaCakes118.exe