Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
21/08/2024, 16:56
Static task
static1
Behavioral task
behavioral1
Sample
b4459ef226bb5e4369cf81918dae50d5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4459ef226bb5e4369cf81918dae50d5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4459ef226bb5e4369cf81918dae50d5_JaffaCakes118.exe
-
Size
2.9MB
-
MD5
b4459ef226bb5e4369cf81918dae50d5
-
SHA1
35cbfba61b5742cf9cf28d5b013a45140a0ac8b9
-
SHA256
d8f49dee2942bd99cd107779f8db25b8327f7c3ce5296d3468c28cd8b1f5669b
-
SHA512
44aca4529e3eab401a82c3d22f0201a6ca572136076dd53ad3418d7f15313aadea8fa1932dc41fd8c0eff7c5e8969bff701738e5329287d8b2d652d0c9090909
-
SSDEEP
49152:K3M1nlZPAtuAxHkqwLtXur9d/EQRAJ2IgCvBTpA4SKJ0sZvVA9IzpuXXzHZ64:aM1nlhALHtwQj/EQ6MIg8T69w00eyzpy
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b4459ef226bb5e4369cf81918dae50d5_JaffaCakes118.exe