Analysis
-
max time kernel
96s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2024 05:00
Static task
static1
Behavioral task
behavioral1
Sample
eaa184c669ef7336de6d6686bd80762d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eaa184c669ef7336de6d6686bd80762d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eaa184c669ef7336de6d6686bd80762d_JaffaCakes118.exe
-
Size
257KB
-
MD5
eaa184c669ef7336de6d6686bd80762d
-
SHA1
315a8cba591e1f47fd5092a20a8e02ca6bf9278c
-
SHA256
23cbd4a93f0978351345b7b418da7ef40d84f9d732481491ee564443905b5fe5
-
SHA512
a3046ff2d134f33c350ac2cfd0c8cdcc53a1387abf8a3e4e16ae467f8981568043ed8b8d94c6c29147a71484485e0988091d46fdc42f88162b9b94607d8af943
-
SSDEEP
6144:jqR0kN/j+2EPlDvxGt2vjDf8hn+m/H7m:Gfh+2EtjxY2vjDfG+EH7m
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\GroovyLayout.job eaa184c669ef7336de6d6686bd80762d_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language eaa184c669ef7336de6d6686bd80762d_JaffaCakes118.exe