Analysis
-
max time kernel
93s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
12/09/2024, 22:43
Static task
static1
Behavioral task
behavioral1
Sample
dd2df447cba357a4f9f688054c04e569_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dd2df447cba357a4f9f688054c04e569_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd2df447cba357a4f9f688054c04e569_JaffaCakes118.exe
-
Size
144KB
-
MD5
dd2df447cba357a4f9f688054c04e569
-
SHA1
7a9bde46e7855ab5f2cc8604ba5c70caf80da94c
-
SHA256
aa3d75d30b6dcfda81d42391fa8419a01e0e71f8b1acedad42a87b4bf8fdcaab
-
SHA512
a02bb3867ed536ff1d8a2df03e8d53bef3521de931374b9ba2c7f75e96e75fb5a3f07671e3335be012aff6e8243df5df1dfd4b1d25c008577720ae4479fa012f
-
SSDEEP
3072:Jo16ziw+Ks0GphsPdHbHOQSiVuJzRfSzN:OQzts/pmPJzOHmz
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language dd2df447cba357a4f9f688054c04e569_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3108 dd2df447cba357a4f9f688054c04e569_JaffaCakes118.exe 3108 dd2df447cba357a4f9f688054c04e569_JaffaCakes118.exe 3108 dd2df447cba357a4f9f688054c04e569_JaffaCakes118.exe