Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
28/08/2024, 19:58
Behavioral task
behavioral1
Sample
c78c2eec7ea4794eab66277d56facbcd_JaffaCakes118.exe
Resource
win7-20240708-en
3 signatures
150 seconds
General
-
Target
c78c2eec7ea4794eab66277d56facbcd_JaffaCakes118.exe
-
Size
611KB
-
MD5
c78c2eec7ea4794eab66277d56facbcd
-
SHA1
14e88273db0b0e151c83b8b2311891ccac252161
-
SHA256
5eb16eb1eef5cfc9e5c4ba2f0f0df344016e9d1ccf25ff6e908ffcfa296d6a02
-
SHA512
b38b1353f4d9f603f70a552d43d03c4580fa518bcbf4b21cd6ef6391618c6aa5575dd34b8a57faa313fbbcb4b3c31c37b4285a2d11911aa5b3f682d86d2e6517
-
SSDEEP
12288:2w9DXRndsoGUB5omLh3fnnAy9An7eMYdr9nnXQ:24UoGUB5rh3v3AHWVA
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2096-0-0x0000000000400000-0x000000000049B000-memory.dmp upx behavioral1/memory/2096-2-0x0000000000400000-0x000000000049B000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language c78c2eec7ea4794eab66277d56facbcd_JaffaCakes118.exe