Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
30-08-2024 13:41
Behavioral task
behavioral1
Sample
caf49a811e4195961bf725e9da3249fa_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
caf49a811e4195961bf725e9da3249fa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
caf49a811e4195961bf725e9da3249fa_JaffaCakes118.exe
-
Size
24KB
-
MD5
caf49a811e4195961bf725e9da3249fa
-
SHA1
f11b2b8d9d11b083468cf445ed1aff154cdd8de5
-
SHA256
ff8c7ac8e68733de6e226beb30886039f388ba28c638d795a5a7ff427e80fbb5
-
SHA512
e7682c2c3350db17865e3ec002fcfcd8e0bd8fd8f1128d298a05ffe0e847d07ec352d8d92d9a1fa476ab5c1fe90e5a0315503b82b072baf5b861495bf3952426
-
SSDEEP
192:Rl5+8Pa9S8kjYTDGgbcp4Llp2SAfF9aEOnryD91ABkGxVXTIqoNGRJ0:Rl5P/jYTDGggpM23fJWyDbAnx/oNV
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
caf49a811e4195961bf725e9da3249fa_JaffaCakes118.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language caf49a811e4195961bf725e9da3249fa_JaffaCakes118.exe