Analysis
-
max time kernel
10s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
18/08/2024, 15:40
Behavioral task
behavioral1
Sample
a73ade88842184f32b10ebe0be38a22c_JaffaCakes118.exe
Resource
win7-20240704-en
2 signatures
150 seconds
General
-
Target
a73ade88842184f32b10ebe0be38a22c_JaffaCakes118.exe
-
Size
478KB
-
MD5
a73ade88842184f32b10ebe0be38a22c
-
SHA1
dd21a89f69552507c4742fecbe9420dd6ba9fac9
-
SHA256
f3cbe5d697b1ea38cda2078833923cb6646e3ca46c7da681a5271d13d41343b2
-
SHA512
61f395fcb07e5be1994cedcbd9781d8cf86ac2d34158ab7e44a49c9118fd86fddd97f7161d9eafd9fe1a16d5165aa9c8c5b869f7bef4efb5210c85405e3bb074
-
SSDEEP
6144:gOLQC+kV/jJt64aHs0WbXvyN6Rt3poonMJI4hA1ggvExeM7:gOcC+krI43vK6f5nEXhJg8x
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2584-0-0x0000000000400000-0x0000000000477800-memory.dmp upx behavioral1/memory/2584-1-0x0000000000400000-0x0000000000477800-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a73ade88842184f32b10ebe0be38a22c_JaffaCakes118.exe