Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
25-08-2024 06:49
Static task
static1
Behavioral task
behavioral1
Sample
c02d37e343610c4f48aeffef6d679e9f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c02d37e343610c4f48aeffef6d679e9f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c02d37e343610c4f48aeffef6d679e9f_JaffaCakes118.exe
-
Size
176KB
-
MD5
c02d37e343610c4f48aeffef6d679e9f
-
SHA1
d2b879c5ba4b1795b09f7c3772bac7e80a2eb0fa
-
SHA256
69f0356794a02e669ec0d45114611a198b3ecb374ca0c12010c9eadf38b81168
-
SHA512
c501cae26b010bc3fbe48896621fae72ecacd3abf68fe6387082645585b9f3078b74e5b818e3fd1bc797ee5fa0119415ba5df5bfd01b435fa96523770760f0a6
-
SSDEEP
3072:w7Qt53L2qq0Z8k93xF26rBSPoV+gRh8BqelFW6++0vvOTYsSNwR9q5B:VLHq0Z8k92iBSPoV+gRh8celb++0vvOi
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language c02d37e343610c4f48aeffef6d679e9f_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2292 c02d37e343610c4f48aeffef6d679e9f_JaffaCakes118.exe