Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2024 07:05
Static task
static1
Behavioral task
behavioral1
Sample
ead0cad8e5551995411e595fc89018d4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ead0cad8e5551995411e595fc89018d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ead0cad8e5551995411e595fc89018d4_JaffaCakes118.exe
-
Size
80KB
-
MD5
ead0cad8e5551995411e595fc89018d4
-
SHA1
6f32888b8439ef88b082e48b93a725290f584a9f
-
SHA256
e1aa4bdc2b86131d93891ad3e7d87253b4b4dbd42b52afa73055fa3f753493fd
-
SHA512
a021178866c500dc56f6767231b88e6430d42aea5637320b23a651f7de4a8f937871bb21c0cf499427932fa9fd36606044f39346103113b14e4f5c1f463ebd28
-
SSDEEP
768:muVAwlOX8rGfzP76snlb29sWvrSibL85ofZjHXfW0oZ+dyoRBRuli:muVzCTf297SWL85om+dyO4i
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ead0cad8e5551995411e595fc89018d4_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4392 ead0cad8e5551995411e595fc89018d4_JaffaCakes118.exe