Analysis
-
max time kernel
95s -
max time network
114s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2024 17:02
Behavioral task
behavioral1
Sample
ebcb975343b32a1f34232e5f05365c4d_JaffaCakes118.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
General
-
Target
ebcb975343b32a1f34232e5f05365c4d_JaffaCakes118.exe
-
Size
127KB
-
MD5
ebcb975343b32a1f34232e5f05365c4d
-
SHA1
841a9721c744d4f7d162cc28c52d19b6fe56f461
-
SHA256
c094243c808ab07c7b38775e487ebceab30adf77f52186e5d1bceabd3263d5fc
-
SHA512
2d959ba22187b16f07853b7ccce8ce9caac71a04d3945c785b6c457f9a323ae17b8152cead8a9ee854d282f54189cd2f709c1fd68a79e7b59312a11b8ced3911
-
SSDEEP
1536:iI7WNoexo95ankLoVBTT8CZsGdS6b/j1gU6T/69:ifNGOlV5T8C6eDj1g29
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2592-0-0x0000000000400000-0x0000000000422000-memory.dmp upx behavioral2/memory/2592-1-0x0000000000400000-0x0000000000422000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ebcb975343b32a1f34232e5f05365c4d_JaffaCakes118.exe