Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
22/08/2024, 13:38
Static task
static1
Behavioral task
behavioral1
Sample
b7d876e2fd11fd3eecd64ba1bb73bf55_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b7d876e2fd11fd3eecd64ba1bb73bf55_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7d876e2fd11fd3eecd64ba1bb73bf55_JaffaCakes118.exe
-
Size
308KB
-
MD5
b7d876e2fd11fd3eecd64ba1bb73bf55
-
SHA1
d26480b064606a67fb49628c3db005946a0e2dee
-
SHA256
18864adce8f6cfb19406cef44e4292d9af2772006e141895e7fa37bd5ea04944
-
SHA512
71f260c31868cae7e40e6b2e6095479c2b64aa33c50a3d884aab0e2991a619550171a10c2aa3eb1308c0c4e35f237a91abeb45c3f04f81ae8776d9806939d194
-
SSDEEP
3072:rb6dRS2Y/Y/YYw/YYYzYYYxYYOYIhsqYYpYYYBYYYPYYVYYLYBVA4OcCgBCsB8Zd:XwsqVulBpd7mP+eBpxwsqVu
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b7d876e2fd11fd3eecd64ba1bb73bf55_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2416 b7d876e2fd11fd3eecd64ba1bb73bf55_JaffaCakes118.exe