Analysis
-
max time kernel
150s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
24-08-2024 22:26
Static task
static1
Behavioral task
behavioral1
Sample
bf8a4cf28cf79ec140dc7f04ca0912ee_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bf8a4cf28cf79ec140dc7f04ca0912ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf8a4cf28cf79ec140dc7f04ca0912ee_JaffaCakes118.exe
-
Size
310KB
-
MD5
bf8a4cf28cf79ec140dc7f04ca0912ee
-
SHA1
2ea3efe7ad9b1ff9c06acea45f92350a2be8c078
-
SHA256
343819fe4c2665d2c17e9e874ed3684925abaa711f928ebbf2651fd57f0ef1a1
-
SHA512
548bcc04761bbf3e74a8e7e15eb519242048ee238ab37b1d2b4f6bcb852a1d17bb39a1e33fe8e9f2f9042c6786f290ef6f26f30f9c3f87f39079b8d5148cac97
-
SSDEEP
6144:9wmFtG+d8XiMmMkWDd9lzHw1qoZl3YTBcXT5CSPW8F62XG4VNfqvHw:2lIsLmdWDdDoZl3YTBY5CDS6z4VNmHw
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bf8a4cf28cf79ec140dc7f04ca0912ee_JaffaCakes118.exe