Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
06/09/2024, 15:17
Static task
static1
Behavioral task
behavioral1
Sample
cfd4a270f2decafc8c0d644f43372eb7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfd4a270f2decafc8c0d644f43372eb7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
General
-
Target
cfd4a270f2decafc8c0d644f43372eb7_JaffaCakes118.exe
-
Size
51KB
-
MD5
cfd4a270f2decafc8c0d644f43372eb7
-
SHA1
00d0d0a626cf65434f051230b59b0b6b70875ac3
-
SHA256
79c551c41b106067014ca6029856895a8bf666a3c6f94367cad8c7943f4d31cb
-
SHA512
a0508e66744d2ebde2ef89e6a0e33aad867745b933d12366b514e2cbbd394879962e1da98531b0619866651cc166c2fb6a19dc646a0c9537660bdef74c94a68e
-
SSDEEP
1536:p8c2IoTp9pvPoZmE8d/XJL6bTTiSWC3xizC3xiqC:Gc29Tp9pltdXJub/1WCOCm
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cfd4a270f2decafc8c0d644f43372eb7_JaffaCakes118.exe