Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
21/09/2024, 02:42
Static task
static1
Behavioral task
behavioral1
Sample
eeecd1622934b170ecead015a24b05d0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eeecd1622934b170ecead015a24b05d0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eeecd1622934b170ecead015a24b05d0_JaffaCakes118.exe
-
Size
260KB
-
MD5
eeecd1622934b170ecead015a24b05d0
-
SHA1
842e6ab2d27459b8eb1f7def003c3a8034c2ecc2
-
SHA256
fb5ca8fc59170b33c0554baa985c09e5af51fa89dc06621f286ec13e55ebd32a
-
SHA512
fca36bcc3134aef95bba3c11772d664f254cfc9acecaa4fcc03d05646ae317d7d7e7cf0689d49ad5a539e6e93164d755c119079d06f52832206bf66ab8b4c999
-
SSDEEP
6144:t8AXgo8QDL2o9v2tdRJvcahBdMO0DGLgLUMgW4uTF6d7BOSid0kYO2a3V1mJ:tlGqv2tdjvcDPdXTjmJ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language eeecd1622934b170ecead015a24b05d0_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2940 eeecd1622934b170ecead015a24b05d0_JaffaCakes118.exe