Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
12-09-2024 22:34
Behavioral task
behavioral1
Sample
dd2ae3e750568f295eba3c4a4176b21a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd2ae3e750568f295eba3c4a4176b21a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
2011522597.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
2011522597.exe
Resource
win10v2004-20240802-en
General
-
Target
dd2ae3e750568f295eba3c4a4176b21a_JaffaCakes118.exe
-
Size
64KB
-
MD5
dd2ae3e750568f295eba3c4a4176b21a
-
SHA1
6f02e9edbe7e8cc13c57133b048b5d63966c3004
-
SHA256
203308d472a381f68c3851fcccf468d735d1690613d0e32e78b7fb74c39d5128
-
SHA512
7eeea22645ca323f7f11492b9cedce229ed3a875cc20c2bb9de94967d74287f62a0ab6925a31f48a3a0c6b22a8509a691a8cd4c7fe65d0bc0d679dd0e4bccfa5
-
SSDEEP
1536:ALXB65939tY6HBg4sXJag6eDt01EZC2xGQgc:ALk395hYXJag6e5gEZDQQgc
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language dd2ae3e750568f295eba3c4a4176b21a_JaffaCakes118.exe