Analysis
-
max time kernel
144s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
18/08/2024, 11:27
Static task
static1
Behavioral task
behavioral1
Sample
a699811f92fdd2e5ac5302debd69ef7b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a699811f92fdd2e5ac5302debd69ef7b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a699811f92fdd2e5ac5302debd69ef7b_JaffaCakes118.exe
-
Size
84KB
-
MD5
a699811f92fdd2e5ac5302debd69ef7b
-
SHA1
953625fef3036bff45fd7c8b1bbb5f0bfecd3be3
-
SHA256
b862798c35ee4685f0d573b51458d4365fc7908098c79e5ebaf6d1ad97ab6032
-
SHA512
cbab478d060f7fa56fd5d10973dffa4a6d9ad59425c5b4861687018d8ea1c33a5d9213835e48fa622e1530f3aae244d876446997c481dd42d77a3d9ff3a60f44
-
SSDEEP
768:zaOGVlf+iW4D/z0uwMf9wVTO6pN3QgF4AERx3pzsT+7lz:WOX4D70sf4pN3QXAERRpz
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a699811f92fdd2e5ac5302debd69ef7b_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 988 a699811f92fdd2e5ac5302debd69ef7b_JaffaCakes118.exe