Analysis
-
max time kernel
16s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
20/08/2024, 09:27
Static task
static1
Behavioral task
behavioral1
Sample
aeb1c63ea239b5bd95642bb90e8916c9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aeb1c63ea239b5bd95642bb90e8916c9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aeb1c63ea239b5bd95642bb90e8916c9_JaffaCakes118.exe
-
Size
226KB
-
MD5
aeb1c63ea239b5bd95642bb90e8916c9
-
SHA1
019dabc08b539c9af3539532d9bb53b3a91d01af
-
SHA256
b3baba7a17c2c4f79b0af9ec193fd1ffa643c9f867338091ac0f6bece250d16d
-
SHA512
ec2bec8e89632e746cdcb6cded65e78c56adbb57370b50dfdad7d49c8db4de83e5d1bfc87c4ac08b9e1df0f8d6ce6c7bb1b4b41675c751b94b69e8d9420f11f7
-
SSDEEP
6144:RQqseFrLrfopprY4h01Hud/QZbubDbQpJZJL/qJj:jrfI2HuFybubDbQpJDGZ
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language aeb1c63ea239b5bd95642bb90e8916c9_JaffaCakes118.exe