Analysis
-
max time kernel
134s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
23/08/2024, 10:25
Static task
static1
Behavioral task
behavioral1
Sample
bb598fe357c96826fae67869a26bbd49_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb598fe357c96826fae67869a26bbd49_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb598fe357c96826fae67869a26bbd49_JaffaCakes118.exe
-
Size
61KB
-
MD5
bb598fe357c96826fae67869a26bbd49
-
SHA1
a3ce3e1a5d70c03156dae65285a7743399a9aeeb
-
SHA256
56352f38de48f4a7e7a1da4dd9db9f5169e7fe5dcf878edbffd9483a76016a5e
-
SHA512
cca43d7e63526fbb28e92305801216e30f58bd14165d996bb551b251f11ac661e7b54508770bc9a38abb1e21abed7e5b6b267d25f25baea8d051d7c18f29c2d8
-
SSDEEP
768:fHHEjB6NsvFslmLJJFRA/kDfTy+uNSdAg7iQXk:vH2vGq6t+xp7Lk
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bb598fe357c96826fae67869a26bbd49_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4780 bb598fe357c96826fae67869a26bbd49_JaffaCakes118.exe