Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
23/08/2024, 03:15
Static task
static1
Behavioral task
behavioral1
Sample
ba242b27527384e3b20732f04a4e20f8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba242b27527384e3b20732f04a4e20f8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba242b27527384e3b20732f04a4e20f8_JaffaCakes118.exe
-
Size
36KB
-
MD5
ba242b27527384e3b20732f04a4e20f8
-
SHA1
bb8c93246e9ed3cfc7fb37b0111e393b58424bae
-
SHA256
326d4f46a01b7a2199c8d2a0a9e4807eaed74f18b25beb6eb93731bea348e1a9
-
SHA512
cae72fac28fcea68c90a4dc9ced3fa8711b4c8904672fcddb709d121e3a560a0380a1ef9c664954d807a775b6e7d67b77b4317701370a54002aa0592298e6559
-
SSDEEP
384:1z3IhGU911TO5OiUvUSRwREZPFpDjugAtMXDKnSQ7L2m07vmAelbj5sSDfGGEEzn:1k/2UcwweugeTINQdw
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ba242b27527384e3b20732f04a4e20f8_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2156 ba242b27527384e3b20732f04a4e20f8_JaffaCakes118.exe