Analysis
-
max time kernel
150s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
07/09/2024, 06:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe
-
Size
108KB
-
MD5
d14d563fbcd0c325f8c6eb3f8837f5fa
-
SHA1
75bc337fb1d3ea67253183935f60075fcbc14e8f
-
SHA256
1f6c1e7aa3959d5a02a0a0ce27344cd27e63c05bee14f1c2683d47e912924768
-
SHA512
fd6053a36e6d15aafcd53cd7a9d10a7f82f048a728a3a5235c4890b8597b7c704cc28cb2f3cc083e787f997c5b266047a9c3722363ad586e85aa9c165cb37c0d
-
SSDEEP
1536:d8vl+gTmQQ3v3fDDtyeOJ6jk3/fSdUk4gDI5U6/YhozBBgLtBj:STTmQev3tq64wIPZsLtBj
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe 2292 d14d563fbcd0c325f8c6eb3f8837f5fa_JaffaCakes118.exe