Overview
overview
7Static
static
7bd8d6585fa...18.exe
windows7-x64
7bd8d6585fa...18.exe
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...sk.dll
windows7-x64
3$PLUGINSDI...sk.dll
windows10-2004-x64
3jpdesk.exe
windows7-x64
7jpdesk.exe
windows10-2004-x64
7Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
23-08-2024 23:22
Behavioral task
behavioral1
Sample
bd8d6585fa90c961aeabcb0b56d7b34e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd8d6585fa90c961aeabcb0b56d7b34e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsWebJPDesk.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsWebJPDesk.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
jpdesk.exe
Resource
win7-20240708-en
General
-
Target
bd8d6585fa90c961aeabcb0b56d7b34e_JaffaCakes118.exe
-
Size
1.0MB
-
MD5
bd8d6585fa90c961aeabcb0b56d7b34e
-
SHA1
40f31ef27bb13b535868f8e56272729db111b5d6
-
SHA256
59169b84b9d6377940558811ad4cf17c57af00f50d76046d66fddda470703c32
-
SHA512
1ce5616f2352abc42357c5f6e3701df534207a78c3ec5140c45f5bb925a1a7bd6daa001d5fac6782c54f9f578a058c4cef1e2c89a23961429dc937abc52dd23a
-
SSDEEP
24576:uw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFRTLaaYOCi6Bj7M5J9ydy2h0:uw1dILPAX8ln6aB4WP3E29V8S4Dhg0fg
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2556-0-0x0000000000400000-0x0000000000463000-memory.dmp upx behavioral1/memory/2556-2-0x0000000000400000-0x0000000000463000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bd8d6585fa90c961aeabcb0b56d7b34e_JaffaCakes118.exe