Analysis
-
max time kernel
130s -
max time network
20s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
26-08-2024 04:52
Behavioral task
behavioral1
Sample
c25196b48116bf9a16ec65ccbe3dd20e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c25196b48116bf9a16ec65ccbe3dd20e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c25196b48116bf9a16ec65ccbe3dd20e_JaffaCakes118.exe
-
Size
509KB
-
MD5
c25196b48116bf9a16ec65ccbe3dd20e
-
SHA1
0c2c0d5c4f79b21969e3ff1e77bede1ba9cfc65b
-
SHA256
444d2fe48f0c02b312e33d42e32968ebd1519b5e553c217d96b82a4ac07ef559
-
SHA512
98050dea31d16ada73660245b154a0619a00c48e3edf5051ce9cbe02a2ea4e8de322d12d3be12678f56a0d0191e01ad650fc68a4fa812b4723411285dfc99452
-
SSDEEP
12288:Ue5M3LcGo7UnRdgLjanu4v8Ic+lzQ+53hquuuuuuuuuuuuuuuuuuuuuuuuuuuuuf:Ub3LcbUnoynd9Bf5ouuuuuuuuuuuuuuU
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language c25196b48116bf9a16ec65ccbe3dd20e_JaffaCakes118.exe