Analysis
-
max time kernel
101s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
06/09/2024, 15:36
Behavioral task
behavioral1
Sample
cfde9969769082a149482ce8c3e18e5b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cfde9969769082a149482ce8c3e18e5b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cfde9969769082a149482ce8c3e18e5b_JaffaCakes118.exe
-
Size
509KB
-
MD5
cfde9969769082a149482ce8c3e18e5b
-
SHA1
7604de0cab1a96709a81a8194c8b917f38ff6f7b
-
SHA256
1578a455fcbcea582e54f0e9323a7cc1c3a1a3293ddaa8951717a7bd22febd38
-
SHA512
af9bceaa41deb99e612cec445c7dd35f5d4fea9c4f1492448a8786ddd5b9051010b50daf277eec7232beee252376a785b1cf94ae02613a8e73b4a7d09f4f94c3
-
SSDEEP
12288:RNNO8DV17fAsXrJ75g9TISbi2nZXI2+heD2WS+lqsWH64:t1R1b/XrZy9TIUl9+0DK+lqsc64
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cfde9969769082a149482ce8c3e18e5b_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 116 cfde9969769082a149482ce8c3e18e5b_JaffaCakes118.exe 116 cfde9969769082a149482ce8c3e18e5b_JaffaCakes118.exe