Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
23/08/2024, 01:47
Static task
static1
Behavioral task
behavioral1
Sample
b9e51c1e71c0ee0e63765d76df2201c1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b9e51c1e71c0ee0e63765d76df2201c1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9e51c1e71c0ee0e63765d76df2201c1_JaffaCakes118.exe
-
Size
27KB
-
MD5
b9e51c1e71c0ee0e63765d76df2201c1
-
SHA1
bae24ee31eb0aee435dceb8a8c4fc0cf17690865
-
SHA256
173d8839c7758db8035cff7f5673cf88dd120fc3cb5747ab95a727860dfa2525
-
SHA512
c21c52d044d8b74bf04882bff27d8e7ce55df5409583bdc60b090415c6bb5e7ed4b6ff2769f7cabf4c6537f5f344b1e869f16082c668a85f7ec6597be54f7159
-
SSDEEP
384:TrkPe5+CZg/2hxF2QTLEPEppEaKhzRvAWb8syW+lB11OoNTyRFAlvCAWiI4hu0jv:ue5eSNLEsppbKSsiTPOCqAlvxFubPG
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b9e51c1e71c0ee0e63765d76df2201c1_JaffaCakes118.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2372 b9e51c1e71c0ee0e63765d76df2201c1_JaffaCakes118.exe