Analysis
-
max time kernel
133s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
23-08-2024 22:05
Static task
static1
Behavioral task
behavioral1
Sample
bd55c54762b381fad459e64f5f620be8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd55c54762b381fad459e64f5f620be8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd55c54762b381fad459e64f5f620be8_JaffaCakes118.exe
-
Size
28KB
-
MD5
bd55c54762b381fad459e64f5f620be8
-
SHA1
ceaf17f876f6301451c2cd655b16caf850601a97
-
SHA256
336ca3bc780b8551f3f65dee9d459430ce00c3ed2fd5afd8410907e8655f6b80
-
SHA512
85b182632748b0132f19f95d4321f2a516fabce4da8e3db41364a89841f3dd4f566321a2d23253bbda22f590d32c8c13ce8cde7310f13a8d48f9d41362a5b47a
-
SSDEEP
384:tvxB2vn/6CHm5NbBamKp7zNw8+iiDr4NeI:dxBI/nobM/7zNr+iYsNe
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bd55c54762b381fad459e64f5f620be8_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1176 bd55c54762b381fad459e64f5f620be8_JaffaCakes118.exe