Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
19/08/2024, 13:25
Static task
static1
Behavioral task
behavioral1
Sample
ab32d27c14ce5fe3e4a17ae4b0c88acd_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ab32d27c14ce5fe3e4a17ae4b0c88acd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab32d27c14ce5fe3e4a17ae4b0c88acd_JaffaCakes118.exe
-
Size
1.9MB
-
MD5
ab32d27c14ce5fe3e4a17ae4b0c88acd
-
SHA1
e75b45a68d61cfce3483607939f170eb1e943cfa
-
SHA256
16e46c407b2aacd0757b454e5f2cc19c2463d61ab5369b0e44a61c4f500b9cf3
-
SHA512
d8c18b79a97e17d6c383fffe0d42438248c2a2d59fcc9de5d084705d44623cc124e27a7215e3dda40acd2ec6785ad158f8d0d3655f74e7fb69bea8ed5ff4376d
-
SSDEEP
24576:5VwcEeTpCz0SLgR+tJzvSsyd5KKne1Q13q30XidAFT/2WNVaDi3FptAKUL:QcNI0qBqKSwJWSe3FoKUL
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ab32d27c14ce5fe3e4a17ae4b0c88acd_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2660 ab32d27c14ce5fe3e4a17ae4b0c88acd_JaffaCakes118.exe 2660 ab32d27c14ce5fe3e4a17ae4b0c88acd_JaffaCakes118.exe