Analysis
-
max time kernel
136s -
max time network
115s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
23/08/2024, 09:21
Static task
static1
Behavioral task
behavioral1
Sample
bb28e3ceb6f3cf4f7dbe79d33a812bc9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bb28e3ceb6f3cf4f7dbe79d33a812bc9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb28e3ceb6f3cf4f7dbe79d33a812bc9_JaffaCakes118.exe
-
Size
64KB
-
MD5
bb28e3ceb6f3cf4f7dbe79d33a812bc9
-
SHA1
ac9d7cf4353a32de2b11bf57748bf8bf4b74fa74
-
SHA256
f99bcbd7c72f631d8d98ae0032e74dd894aa51ca006b563c752934f921a6a9b3
-
SHA512
ab156414a869297aafc20449974c602a0f9f6c6dc424fe8b8a4826c773b5112b5e3602e94b9c3450b4d970a80c879680b5b45a43b3771063530eb8fa307d65ae
-
SSDEEP
768:g91Ix+kuvA4IecklIAdLAf4ubODhASJsYh4gpiH3ddUwrit8Rs+T3xGdPOfv6Dta:gbOfmfBK4CZCfcF7xt+OGa
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bb28e3ceb6f3cf4f7dbe79d33a812bc9_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3900 bb28e3ceb6f3cf4f7dbe79d33a812bc9_JaffaCakes118.exe