Analysis
-
max time kernel
140s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
23/08/2024, 19:17
Behavioral task
behavioral1
Sample
bcda95a6af155181ad1fdecaabf04139_JaffaCakes118.exe
Resource
win7-20240705-en
2 signatures
150 seconds
General
-
Target
bcda95a6af155181ad1fdecaabf04139_JaffaCakes118.exe
-
Size
11KB
-
MD5
bcda95a6af155181ad1fdecaabf04139
-
SHA1
0eacfbe6dc2ab9a662a1d27bb4d3e633cb62d1e1
-
SHA256
89322527a5f8d650a6a380e9603706ddd0a6f905fd9f298203935ead477601ed
-
SHA512
b0f6449dc111e83079dda6a8b42c429aa465f0554e81a4f0eba49053c6d9703401850cee778c15398c5bd22b1e5eb2cfaf19cecea316ba182a8cfc65b15274c9
-
SSDEEP
192:nK/tW5wiHawD5swbm5V4xxxhra16OyRpgtMH7N08C5Ah8oTRn:qtEwiHawewbm5+vravx2bNEo
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4800-0-0x0000000000400000-0x0000000000415000-memory.dmp upx behavioral2/memory/4800-1-0x0000000000400000-0x0000000000415000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bcda95a6af155181ad1fdecaabf04139_JaffaCakes118.exe