Analysis
-
max time kernel
94s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
21-09-2024 13:45
Static task
static1
Behavioral task
behavioral1
Sample
efec59210d1433c6e7ce32db34bbdd82_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efec59210d1433c6e7ce32db34bbdd82_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$0/resultscan.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$0/resultscan.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
General
-
Target
efec59210d1433c6e7ce32db34bbdd82_JaffaCakes118.exe
-
Size
114KB
-
MD5
efec59210d1433c6e7ce32db34bbdd82
-
SHA1
3d413eb015f8afafa281fe654c8b56c88f5647b9
-
SHA256
8bffd47663f174894a3d552ce99a94f301b4e38bc06a58f1543345a31b3271d4
-
SHA512
954ac9d6995a0fb6f9b3ad3c460c7dcc80e2e764fa27f99b53f727cc5e2a9e1f0d9208b3461d87ae540d7cf3e6e3acf35ba5f2159360ed43046f16dea04b6675
-
SSDEEP
1536:U42cPHBg5mVXkJzw/Z4RoR9RM10pT3EBKdcSKZ9z2nt7mrbxLGWQ0+Y0CiH7k0:U42U65mXkJzU44ROsT3EUmliw0
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language efec59210d1433c6e7ce32db34bbdd82_JaffaCakes118.exe