Analysis
-
max time kernel
124s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19/08/2024, 23:59
Static task
static1
Behavioral task
behavioral1
Sample
ad1daddef31c21bdf3df3a957f93ded0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ad1daddef31c21bdf3df3a957f93ded0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad1daddef31c21bdf3df3a957f93ded0_JaffaCakes118.exe
-
Size
220KB
-
MD5
ad1daddef31c21bdf3df3a957f93ded0
-
SHA1
3955f921cd8cb854faa7aa6b4a6d385d548dbe2c
-
SHA256
1feeb62997e9ce8ef99b0c8a3d4da1c98df7440b34a9885295b2bc1d8fc239f4
-
SHA512
1537c4f4a666fd56af0cb67209c9ef0a4b2ab907bae30f58dda80c4a2519f0bd0a798f46ba6e99a65346731816ca1fc4aa1e687bfe9ad533a68d043079e276a9
-
SSDEEP
3072:7PfmnYQFvEi1/7b7K1OwqvsyL/fyg6EUEa6UZ1+EzEW0keF2exnEoghujfDc0pPS:LmLvvKOzG1+BVD0sPUm
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ad1daddef31c21bdf3df3a957f93ded0_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1936 ad1daddef31c21bdf3df3a957f93ded0_JaffaCakes118.exe