Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19/08/2024, 13:14
Behavioral task
behavioral1
Sample
ab2a2c9fcf67ace09195a55c7e69a61e_JaffaCakes118.exe
Resource
win7-20240708-en
8 signatures
150 seconds
General
-
Target
ab2a2c9fcf67ace09195a55c7e69a61e_JaffaCakes118.exe
-
Size
197KB
-
MD5
ab2a2c9fcf67ace09195a55c7e69a61e
-
SHA1
dcbf3051caeaaeee82469bba8eb30123f5ec6814
-
SHA256
2f21c0ff3fcf766fab452764600e30b2ec207745135405557b4d09edd6305f4f
-
SHA512
f2aedec5cc637048f7fe5beac9dbea6fe00942fade341dbb5ef084548fdaf28fe61d798ed02e375931becaef214475dc3bb2256116a988286c22ba1d916aa9e6
-
SSDEEP
3072:6oXU5eRdRt5wcTLtOY9Ea9DFQyykmjtThDZzQSSI/FLoLmfu0UWjYXjlBK:tXU+95wcTAY97DOyJmtRe6fnw
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/656-0-0x0000000000400000-0x000000000046B000-memory.dmp upx behavioral2/memory/656-2-0x0000000000400000-0x000000000046B000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ab2a2c9fcf67ace09195a55c7e69a61e_JaffaCakes118.exe