Analysis
-
max time kernel
96s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
06-09-2024 11:01
Static task
static1
Behavioral task
behavioral1
Sample
cf65d9f7a6d02ad5efcd45e6159e0431_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
cf65d9f7a6d02ad5efcd45e6159e0431_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf65d9f7a6d02ad5efcd45e6159e0431_JaffaCakes118.exe
-
Size
124KB
-
MD5
cf65d9f7a6d02ad5efcd45e6159e0431
-
SHA1
0968c803cc5f4c6f86c7c147f249c85f350449d2
-
SHA256
5be7b668e78a52f38353a35021cd408c286e0c23afc4d53b0eb2be118e3f8a91
-
SHA512
fb343b33ec8cf0e7df32c7db0fd36e55863b0eca599c6344b4ad25093ea72fbbd83179b23be0572982af89cd6b6db5d4968d7b619954651ae8d07ba37a34ea65
-
SSDEEP
3072:53sXpb8qb4oAwOSxoPMVsf0nQla8vxgs2N+r3r:585hb4RgPvSCsDr3r
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cf65d9f7a6d02ad5efcd45e6159e0431_JaffaCakes118.exe -
Modifies registry class 3 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ cf65d9f7a6d02ad5efcd45e6159e0431_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile" cf65d9f7a6d02ad5efcd45e6159e0431_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.key cf65d9f7a6d02ad5efcd45e6159e0431_JaffaCakes118.exe