Analysis
-
max time kernel
93s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
14/09/2024, 12:15
Static task
static1
Behavioral task
behavioral1
Sample
e0299484b8ef0282801ada446eb35d2b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e0299484b8ef0282801ada446eb35d2b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0299484b8ef0282801ada446eb35d2b_JaffaCakes118.exe
-
Size
100KB
-
MD5
e0299484b8ef0282801ada446eb35d2b
-
SHA1
876ba23ae40ea4b0b9943ccd2e83ff801abd2773
-
SHA256
f5faea4a6f56b12f06e68471589697b19bd2653360b3f047cdc05c60721a099c
-
SHA512
73c52035221ae068ca8555439382ce32b012a48c33bbee20a0f2bfe55e4a3934c95348d9c7f788b66c1961796894b73ed43b7f5543830f2fe32e3aa1beea9bbb
-
SSDEEP
3072:kos0tolsp7PLiB3wTy8p0XAAB3fxl9Eyet8rkqkU4C:N6Ckpzi8wQP
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e0299484b8ef0282801ada446eb35d2b_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2212 e0299484b8ef0282801ada446eb35d2b_JaffaCakes118.exe 2212 e0299484b8ef0282801ada446eb35d2b_JaffaCakes118.exe