Analysis
-
max time kernel
142s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
22/08/2024, 16:26
Static task
static1
Behavioral task
behavioral1
Sample
b854e0ca2ef4830890499467357a99d0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b854e0ca2ef4830890499467357a99d0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b854e0ca2ef4830890499467357a99d0_JaffaCakes118.exe
-
Size
968KB
-
MD5
b854e0ca2ef4830890499467357a99d0
-
SHA1
8b4ee235c3f12201cb46bf966a2c397d0ce5e73f
-
SHA256
35782a11de0bee87fcba28a90a2337707764f0f05863feb4a6e7968f0a27f4b1
-
SHA512
ba0a9542bcf7276a09bc70bdee9ea84e37c9967b271e55a6f3aef212a66f64b8795e68652763068ca10644e87d3c5f9f121395bc864b31e4e608f61aec34ea96
-
SSDEEP
24576:ftF6FxxxxxH2CNtF6XDib3DDcDyFDi9DDq:fyDyXDib3DDcDyFDi9DDq
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b854e0ca2ef4830890499467357a99d0_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1864 b854e0ca2ef4830890499467357a99d0_JaffaCakes118.exe