Analysis
-
max time kernel
95s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
14-09-2024 16:04
Static task
static1
Behavioral task
behavioral1
Sample
e088df0b2d07aeb10fd63fb9294287a9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e088df0b2d07aeb10fd63fb9294287a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e088df0b2d07aeb10fd63fb9294287a9_JaffaCakes118.exe
-
Size
56KB
-
MD5
e088df0b2d07aeb10fd63fb9294287a9
-
SHA1
377fd17044e4855dc362715e1142864f1f29051a
-
SHA256
8754ab0f79074265a9852547f791fce1a8e69fae806f6c5400f59f0de50af271
-
SHA512
473da4f18a0ffacc617045cab4f59d910e3ecd00d8d76823af320d0b9c040e4e9f5d36fbaebfcbffc290c1ca6348f763c6acfc13aba5d881dc26b9622549d5c7
-
SSDEEP
384:HSHLA9/oY06SKOIn6JZ79ppxmZT0M6/NrCBaZaslUntj:yHLAJoirn6D9dSxacFtj
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e088df0b2d07aeb10fd63fb9294287a9_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2776 e088df0b2d07aeb10fd63fb9294287a9_JaffaCakes118.exe