Analysis
-
max time kernel
123s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
21/09/2024, 19:57
Static task
static1
Behavioral task
behavioral1
Sample
f080a10aafafc1c9f30824ff2a8e3c5c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f080a10aafafc1c9f30824ff2a8e3c5c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f080a10aafafc1c9f30824ff2a8e3c5c_JaffaCakes118.exe
-
Size
821KB
-
MD5
f080a10aafafc1c9f30824ff2a8e3c5c
-
SHA1
90462225fd53ccd3086c5df3ab8bffaebeb0ae6c
-
SHA256
02a2c552d93502b24b78f39f1ee052778c5396aba164b0376c24852c5eb0b2a9
-
SHA512
17ec392e738dc754586af64e4b7b1ccd9c396befacd8d18032e495f3658c890b3893c3d17d572e2cbe9772a376128983afb7743aeb3a2f2010ef09a32d802daf
-
SSDEEP
12288:NIGFzIhh3jY1GCAudWJ76CLU2VDkF3Z4mxxsDqVTVOC7iyY:6I0lY1uoWF6qnDkQmXLVTzU
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f080a10aafafc1c9f30824ff2a8e3c5c_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3336 f080a10aafafc1c9f30824ff2a8e3c5c_JaffaCakes118.exe 3336 f080a10aafafc1c9f30824ff2a8e3c5c_JaffaCakes118.exe