Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
29/08/2024, 08:20
Static task
static1
Behavioral task
behavioral1
Sample
c878f6e277910ea47db5538b47ff9cbb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c878f6e277910ea47db5538b47ff9cbb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c878f6e277910ea47db5538b47ff9cbb_JaffaCakes118.exe
-
Size
60KB
-
MD5
c878f6e277910ea47db5538b47ff9cbb
-
SHA1
09423dccf377554dee3031f2ced7aece5edca942
-
SHA256
bc8f0998e4a929f0c3fb1704b262fc9d7e5ff89d8ccd483b1093138b28f6f8d4
-
SHA512
c10de4db17b4dffff0841cc762502f76b588810979ad66967cb8323c6debebe95d50d0c8e991841751e65cf0191bb06895bc6827f362c0d28b517b6363ae402d
-
SSDEEP
1536:OtqANNcqnIlavIXHnVN5T4UQNRzOj+O0MeD/NHv:6lNNcNavTZHv
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language c878f6e277910ea47db5538b47ff9cbb_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5068 c878f6e277910ea47db5538b47ff9cbb_JaffaCakes118.exe