Analysis
-
max time kernel
14s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
22-08-2024 03:39
General
-
Target
b634f5caad27c49d809a33792dfc595a_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
b634f5caad27c49d809a33792dfc595a
-
SHA1
2ec69defdb9e8fe640141569deeaa58a11c1b958
-
SHA256
580b8c649e6b31b7ca5f186584015e32317952efbada555f69cce1f660823f19
-
SHA512
bbf78bdb92dd78584b7bfea17da706a20003bf4264a4b5a47597325706341b7e8cfdf06500491f7e62024328a8911fbe288905003f3f0c8d85ccf4dbffa4dc47
-
SSDEEP
12288:ChUezuH1dcQ/SHxbrm/tPWg20+qLJKq7lKxsYIhuOY08GZEPz:6QQetPWg207Kq7l4KuOYzx
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b634f5caad27c49d809a33792dfc595a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b634f5caad27c49d809a33792dfc595a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx