Analysis
-
max time kernel
93s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
22/08/2024, 16:12
Static task
static1
Behavioral task
behavioral1
Sample
b84ab735a9b4ff4a9cf2ae7d5226dcfb_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b84ab735a9b4ff4a9cf2ae7d5226dcfb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b84ab735a9b4ff4a9cf2ae7d5226dcfb_JaffaCakes118.exe
-
Size
24KB
-
MD5
b84ab735a9b4ff4a9cf2ae7d5226dcfb
-
SHA1
b9d62890b7ae98f7b875f14010bee6c3d55f6250
-
SHA256
757ac22b7be59c58e903ab0725504580bddedd357415dbc0c0787b8452410af5
-
SHA512
a1b4498a4aefb530249e76cdf4c5a1a36f35b30fa8b9b78ecbf4747c0ec01bfed6d4dab2910b8b04dd88d237b6ed6717a2c08026db003cc046132ec614e9188b
-
SSDEEP
384:UettDD74mVaNjaUHH2hS4wkkWHH2hS4wkkQo:UerDD7JoWcbkPWcbko
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b84ab735a9b4ff4a9cf2ae7d5226dcfb_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3644 b84ab735a9b4ff4a9cf2ae7d5226dcfb_JaffaCakes118.exe 3644 b84ab735a9b4ff4a9cf2ae7d5226dcfb_JaffaCakes118.exe