Analysis
-
max time kernel
15s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
25-09-2024 03:16
Static task
static1
Behavioral task
behavioral1
Sample
f50dca54c26c0d6767055cb79e5a3cc5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f50dca54c26c0d6767055cb79e5a3cc5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f50dca54c26c0d6767055cb79e5a3cc5_JaffaCakes118.exe
-
Size
68KB
-
MD5
f50dca54c26c0d6767055cb79e5a3cc5
-
SHA1
9e08e6b7f99631ba2dd4b1e8daf280819ad10add
-
SHA256
1b7177aa8bb10c67c3acc4bcc14e0d22bd96d15625ae0a88e8b85bc088902701
-
SHA512
6f2f5f9c9e4a3e2aaacba1b091e2bb8714c49cc244dc7b7abefc7a5da8b5663ede15370449c3cc2c661d140d6740532a9147642b99467ce5cfbe50ec293f3331
-
SSDEEP
768:41mjLjBjcjfj/jxjYjYjxjijVjDjKbK6s6aWfoSTLIHzPIHXkDZFXhAzg7hn4aPQ:415ZPvf9sPPDxAz35ToRe4q
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f50dca54c26c0d6767055cb79e5a3cc5_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2296 f50dca54c26c0d6767055cb79e5a3cc5_JaffaCakes118.exe