Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
22-08-2024 11:33
Static task
static1
Behavioral task
behavioral1
Sample
b7786417ed7eb0e29e8deb7c5f1b8ad8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b7786417ed7eb0e29e8deb7c5f1b8ad8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7786417ed7eb0e29e8deb7c5f1b8ad8_JaffaCakes118.exe
-
Size
36KB
-
MD5
b7786417ed7eb0e29e8deb7c5f1b8ad8
-
SHA1
3ffee403f2cbe0d331786505f7502093dbf57dad
-
SHA256
949d1ef32d491045930cce3616891e3ce4779cea5526e0bf99fc4bf2522feec2
-
SHA512
220e04c0db95e2d9dd6fef103ad40686f92f089f53a57214d97b3a3b0ffbd089684369ce0bf887bfe624df24f2a596ed9440e10903b3301f6c07642044761604
-
SSDEEP
768:SQL0yG8TEL/Q1qZ8Ur/X/SGZ/ocZ+XeCa79YSnZPucoAPruNx:Sl8QKuCFSnZQAPux
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b7786417ed7eb0e29e8deb7c5f1b8ad8_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1056 b7786417ed7eb0e29e8deb7c5f1b8ad8_JaffaCakes118.exe