Analysis
-
max time kernel
90s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
06/09/2024, 09:36
Static task
static1
Behavioral task
behavioral1
Sample
cf3cf8f1f6b7426eb8bdd741027f7db9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf3cf8f1f6b7426eb8bdd741027f7db9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf3cf8f1f6b7426eb8bdd741027f7db9_JaffaCakes118.exe
-
Size
40KB
-
MD5
cf3cf8f1f6b7426eb8bdd741027f7db9
-
SHA1
1df7f48dcd33967ff7f52b9bd01f1c92a8333ab4
-
SHA256
b20daf9b7491a4b4b499104cba30578e5d2b9623648d798dd7b54ef37e793863
-
SHA512
3d452a1817079aa32fb8f449d18f06667e03089fbaa8727bb0f86251f60e7430831dc8040d65d738b0218f0406905a461921411a7aea9887e97a14f3bfff027e
-
SSDEEP
384:JbbDslKDSlfgRG8n+luyifG6Fbe3pu6SfiOFCI+WTR71BN5F996TkuaL/fwiLn/c:J/YlfloR1TOFQx8e/IyPyrxxTSIUOa
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cf3cf8f1f6b7426eb8bdd741027f7db9_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4704 cf3cf8f1f6b7426eb8bdd741027f7db9_JaffaCakes118.exe