Analysis
-
max time kernel
96s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
06-09-2024 07:26
Static task
static1
Behavioral task
behavioral1
Sample
cefe0d9f124d3db7cf27f54bdb9a836b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cefe0d9f124d3db7cf27f54bdb9a836b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cefe0d9f124d3db7cf27f54bdb9a836b_JaffaCakes118.exe
-
Size
1.5MB
-
MD5
cefe0d9f124d3db7cf27f54bdb9a836b
-
SHA1
e05f91bca843ff720a080321cf3083dcbcafb6a0
-
SHA256
fbf37ea66dae9362d8425efce78628edf3a336375dd49a21918aa5c33f709a05
-
SHA512
47caaf285b6fe61a82f4b468c295410cbd6886f9a9d659c1503b256f6705cbfdc1f22d4d006b81148e1569cee44adda025caa26f21b484948e1d70c55175e892
-
SSDEEP
24576:mUNQOlR5ly9bn+vKUeDXgCyZPPMZ/Ir2PKYixVC/yX8lZOMD+CDHYV0pbLC:mC7vh4wRZPPMIPqI6FC
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cefe0d9f124d3db7cf27f54bdb9a836b_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3656 cefe0d9f124d3db7cf27f54bdb9a836b_JaffaCakes118.exe 3656 cefe0d9f124d3db7cf27f54bdb9a836b_JaffaCakes118.exe