Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
25/08/2024, 04:05
Static task
static1
Behavioral task
behavioral1
Sample
bff19760d794c986ef2af54a5a8a6070_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bff19760d794c986ef2af54a5a8a6070_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bff19760d794c986ef2af54a5a8a6070_JaffaCakes118.exe
-
Size
40KB
-
MD5
bff19760d794c986ef2af54a5a8a6070
-
SHA1
f54044a3015c500262c6d1ae067ebc36195e0712
-
SHA256
95865a631825eed9c8eb31dc3c535be8aae43f824f42652cdafdda15ede0749d
-
SHA512
24346cb24a09d6cfdeb2c7a5790fe3e394ec8bb6c86d422d5431d3889b768a700e3643bcccd41905766f1c4ec2748f824c46717614e980eba5e8b2be493d7e64
-
SSDEEP
384:sd3gH8NyR2vkwx0/X4iGC+Oy2VziyiwmimiZa+hoJiSHHZhEG3DACrQ:0gR2swxWqC+OyEHNa+hoFPA+
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bff19760d794c986ef2af54a5a8a6070_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2308 bff19760d794c986ef2af54a5a8a6070_JaffaCakes118.exe