Analysis
-
max time kernel
96s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
07-09-2024 16:12
Static task
static1
Behavioral task
behavioral1
Sample
d254a28562d278ed5c7150d6e9a770d2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d254a28562d278ed5c7150d6e9a770d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d254a28562d278ed5c7150d6e9a770d2_JaffaCakes118.exe
-
Size
40KB
-
MD5
d254a28562d278ed5c7150d6e9a770d2
-
SHA1
38d1ed2bf8f4a1ecc727b1940984ea5553a83408
-
SHA256
b11f6c9a9bd8e8dd5d437c2592ad655b43388308573c36159f7515987ab72fab
-
SHA512
f3ae74eb0e7079beaf65c08a4e73a063c7dfe45ac1f8c72ead398b5b546a2a9c2a99b254a18b5b69764e41013caa66afab54bc1dbde302235ab37c5466cf8a85
-
SSDEEP
768:1Cyh5LKbI7mj4FxU0IK+w4zQ7mtoAT+i0RkXBG:Mc+taU0IK+wEt+ifG
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d254a28562d278ed5c7150d6e9a770d2_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2424 d254a28562d278ed5c7150d6e9a770d2_JaffaCakes118.exe 2424 d254a28562d278ed5c7150d6e9a770d2_JaffaCakes118.exe