Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
20-08-2024 09:33
Static task
static1
Behavioral task
behavioral1
Sample
aeb5e0cf311be541fed3bddad13261d3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aeb5e0cf311be541fed3bddad13261d3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aeb5e0cf311be541fed3bddad13261d3_JaffaCakes118.exe
-
Size
24KB
-
MD5
aeb5e0cf311be541fed3bddad13261d3
-
SHA1
9a46e3a1b855bb41b2b77c15213c8f74cf604de2
-
SHA256
c110d467427f9a309c1b33059e84878d8bb7ed3f8c4bca2e3c1ce3e1fc5b4db3
-
SHA512
8bea8a6a879f61c467ea36d43c583948c6bf43065df625db2d0e05edc3d0c5f9b5a75991cefff734fd5789e7edf203dfa5a8c98bd2102de784cfefbd44b62afc
-
SSDEEP
192:nRn2iDim7x5KPArZNpDUFEnRdzAPUEmEP05kHOGD20CEF:RnFKPA9NpDUFG7zAck8mVD24F
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language aeb5e0cf311be541fed3bddad13261d3_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2404 aeb5e0cf311be541fed3bddad13261d3_JaffaCakes118.exe