Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
06/09/2024, 03:15
General
-
Target
ce84f00e65641e12c2269748102c49f5_JaffaCakes118.exe
-
Size
635KB
-
MD5
ce84f00e65641e12c2269748102c49f5
-
SHA1
5c156299848614e6143b577f697f2ffc347c4b29
-
SHA256
12543d24558de75562c25c026e4bb021eb72e4f7ad2f150cbe318b9214e03e64
-
SHA512
820402642b0a5f8d76480b3072db916c7c9534f91e5990cf34d3411c8cd1de3b56db0b725ad2a1ed172ef18e0863469d22a6f3d92c6cacdf6518d61b9c953f0c
-
SSDEEP
12288:3IbPsXD/YIYkaJou7JYOoujbeWADdAq08rWrDUj8pfV:3esXD/YIYkaJogJYOBbeWADdAqfWrDUC
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce84f00e65641e12c2269748102c49f5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ce84f00e65641e12c2269748102c49f5_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx