Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
07-09-2024 14:54
General
-
Target
d23217b1f1525024e29ce92306386347_JaffaCakes118.exe
-
Size
20KB
-
MD5
d23217b1f1525024e29ce92306386347
-
SHA1
e1dec7d41cba63d4a2af1f54186eff81e9fcc230
-
SHA256
6a344babab62d8abe25a4176ff8c34ad4d14e85b730c225cf32ce464c8883803
-
SHA512
6a6958571bf790a7e98e08a310abc9e53dd0ca8a6f71166aab0256d312d5c2b883f943217da73bbf65e376b52e183181735ee332f56110bd634765a98ecbf984
-
SSDEEP
192:COW2+gTWvGfG3CYwJygPfgCMiTwlbMVN8LMAsT93YOUdc0XFX:xW4xfICWggAUlMAsT93YOUC0XFX
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d23217b1f1525024e29ce92306386347_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d23217b1f1525024e29ce92306386347_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx