Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
22-08-2024 04:41
Static task
static1
Behavioral task
behavioral1
Sample
b661d43d03d27491de258b9a4a57612d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b661d43d03d27491de258b9a4a57612d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b661d43d03d27491de258b9a4a57612d_JaffaCakes118.exe
-
Size
24KB
-
MD5
b661d43d03d27491de258b9a4a57612d
-
SHA1
3b3bbd12f697bf77a7ea965de993d1c4b30f4f54
-
SHA256
218de37ce8966a895ee96f48a2f7430691615e8491bf7e5ce75e748d47fa8662
-
SHA512
10dc028e472c5977c105502962a33a90fca91a4ec7bbb9461e10060d3207f450d3e7e136279cd4b6379d9c98901bd849404d31d718da9d89e4bd902c3e582d8f
-
SSDEEP
192:6x+qEA0SXFxe2ZP3y5w3xW5DrRxwcmG9jAzE13kj4nx4lbxCBMTE:6x8KFxfZPi5wotRxwcBjAzE1t4lbEB
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b661d43d03d27491de258b9a4a57612d_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2276 b661d43d03d27491de258b9a4a57612d_JaffaCakes118.exe 2276 b661d43d03d27491de258b9a4a57612d_JaffaCakes118.exe