Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
20/08/2024, 00:16
Behavioral task
behavioral1
Sample
ad2ae0394ff8762032804a19763eb309_JaffaCakes118.exe
Resource
win7-20240704-en
2 signatures
150 seconds
General
-
Target
ad2ae0394ff8762032804a19763eb309_JaffaCakes118.exe
-
Size
11KB
-
MD5
ad2ae0394ff8762032804a19763eb309
-
SHA1
8f3dd6c3882b20831eb19c5604b66633fcb26901
-
SHA256
a6cd363394b43d665a8f515c332a8219da10994db0ce2347c34a3c9f1b71548f
-
SHA512
8931a155bbd06dcb93785a01a01ed7150f4a1d70fb4eefaa6dc35f26e2c9d7e0de6f4e231922913893f413cb7263681dfe8d83c6630610498b703c46a4401f7a
-
SSDEEP
192:mvB0VbIy346xFYTWRtFuQ3tpLqfEO0zpUPEvubbwhjkZWZO+hh0NyUa4WnEDW2:GiV0b6xFYTWduqnqfqz1t48xE8iWnEDj
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2736-0-0x0000000001000000-0x000000000100C000-memory.dmp upx behavioral1/memory/2736-1-0x0000000001000000-0x000000000100C000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ad2ae0394ff8762032804a19763eb309_JaffaCakes118.exe