Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
25-08-2024 08:44
Static task
static1
Behavioral task
behavioral1
Sample
c05e1381e010b3bc2b6327f68da14018_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c05e1381e010b3bc2b6327f68da14018_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c05e1381e010b3bc2b6327f68da14018_JaffaCakes118.exe
-
Size
24KB
-
MD5
c05e1381e010b3bc2b6327f68da14018
-
SHA1
c12b43e075ded563b8546003e0e5bc47273b5535
-
SHA256
d6e8128fbabf427d2e83bc012f2ecfa5c015532311c7f674a7125849a4c4ecd2
-
SHA512
fde8e0f5bcb8fbf9475f4faeaa355501f3cf674d63d6304bf9cfae298d6b8427805d7f6fefabe55b0b385749d552f0a2bfd1cefec6d565c4279f8442dc10a649
-
SSDEEP
384:/QIYSUBrK8cwZzPkdoJdtebi4JhTDZ4/RsWUB:QSOIAAPL+c
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language c05e1381e010b3bc2b6327f68da14018_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3040 c05e1381e010b3bc2b6327f68da14018_JaffaCakes118.exe