Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
27-09-2024 21:53
Static task
static1
Behavioral task
behavioral1
Sample
faf803e507a5dcfe5f217ff3a0c6af68_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
faf803e507a5dcfe5f217ff3a0c6af68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
faf803e507a5dcfe5f217ff3a0c6af68_JaffaCakes118.exe
-
Size
616KB
-
MD5
faf803e507a5dcfe5f217ff3a0c6af68
-
SHA1
73e023e15ebe3459bdbf4cd6a8b46517d3ceb8db
-
SHA256
64d0d9e0cc5e9708ef05b911f466c1e5a160f4aaeb5ea951fbfb54363d130af3
-
SHA512
4601e21fca231efab11479d6fa17befdff981c08d988ba3316d3522d1cc2a323979bc9ad6b17c6d54014e69edbd93e76e2815f6950590ed4c1edf41ee6bb2d69
-
SSDEEP
12288:2cFsn5b3jAOJgC9JnDLWTgU7rwyX43jJ4TBVcpg2:2v5Tj9gC9JnHU3mUt2
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language faf803e507a5dcfe5f217ff3a0c6af68_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2656 faf803e507a5dcfe5f217ff3a0c6af68_JaffaCakes118.exe