Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
20/08/2024, 13:35
General
-
Target
af6e1ef1eb2b614b17ad3a5198edcac5_JaffaCakes118.exe
-
Size
64KB
-
MD5
af6e1ef1eb2b614b17ad3a5198edcac5
-
SHA1
ab1c8b1fba50ddcba665df9a3f211bd20a2815ff
-
SHA256
bcb14ae6baaf55e9607ea3f7cf70f46d70337b9f49fa1a032dbf1e088a587529
-
SHA512
ab94a8a27b205eea7aa90f71240a72de6d1b504c95cbd8846ba4f78bf5f87e1aa34b26e310352f1a8ef6f6f49894de4d63f5e07cc2f73485515c7e79d647b5ba
-
SSDEEP
768:+DFi6zNTaw8h3e+Sym04YE0D2++TqtxU42MGP6j8OgQq5nqW0nblNvvg7OU9rsHZ:+DFi65wt2++Ki+CJs49kS89roWz1P
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\af6e1ef1eb2b614b17ad3a5198edcac5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\af6e1ef1eb2b614b17ad3a5198edcac5_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx