Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
06-09-2024 06:17
General
-
Target
cedd55bfd6f0a11e88d384dfb8c9dc6b_JaffaCakes118.exe
-
Size
44KB
-
MD5
cedd55bfd6f0a11e88d384dfb8c9dc6b
-
SHA1
7fa6c18e2f89a14bcbb3038dd4c45c864546b551
-
SHA256
e8e41c96afc48b85a036b6973ffa989dfb1dfb5fa772952deed81f4835942885
-
SHA512
d2a098c1ff7b700911f6379b2b72a9ab2733fb9ca0426686ebb40188dc5a522519c36f7fc01f7ec4b133b5bb6f95a44356cb6d01525c109cc2503fce35bd7a0e
-
SSDEEP
768:Uj/YLMAxa4TqWGPthwLT1k+SeKFfULA7yq2b/d35NP:K/YXTqWGVOFkveK5UkyD
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cedd55bfd6f0a11e88d384dfb8c9dc6b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\cedd55bfd6f0a11e88d384dfb8c9dc6b_JaffaCakes118.exe"1⤵
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx