Analysis
-
max time kernel
150s -
max time network
20s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
15/09/2024, 11:32
Static task
static1
Behavioral task
behavioral1
Sample
e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe
Resource
win7-20240903-en
windows7-x64
4 signatures
150 seconds
General
-
Target
e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe
-
Size
434KB
-
MD5
e2624ccfd940477f98c06cea708cbd2a
-
SHA1
1b390ef6a4f7dcefad98076d32149e79e9f7a3d9
-
SHA256
26f103110036ff67d0faee89026717181326b1a27ac895bf13630651a5b7ae97
-
SHA512
e4e758503de68351705cd74201e148f58ce104bc8e7698d4d8f5af4b16f269f3e304493afb00394449af74a04a151e44b9e83863037d57910e8e044960852448
-
SSDEEP
12288:4ySSCIv4llf7QAPypM0xGuWfqCNHI2ehefPNSN:4pSPvaljQAPkM0wuiqCHeqFSN
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/696-1-0x0000000000400000-0x0000000000479000-memory.dmp upx behavioral1/memory/696-3-0x0000000000400000-0x0000000000479000-memory.dmp upx behavioral1/memory/696-2-0x0000000000400000-0x0000000000484000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe -
Modifies Control Panel 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Control Panel\5761b2dc-ce77-4bfa-b965-6f33b1867cf2 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe 696 e2624ccfd940477f98c06cea708cbd2a_JaffaCakes118.exe