Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
28/09/2024, 23:31
Static task
static1
Behavioral task
behavioral1
Sample
fd5c860be7b8193379a42cc703e40fd1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd5c860be7b8193379a42cc703e40fd1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd5c860be7b8193379a42cc703e40fd1_JaffaCakes118.exe
-
Size
172KB
-
MD5
fd5c860be7b8193379a42cc703e40fd1
-
SHA1
c7909eba5f9c34c7fda33a38cf3bec8eb6b75b4b
-
SHA256
fe5e88674828707d44269dbb022a7b07257aad53d3009a914041456648f9eb43
-
SHA512
0659f5a5f48ed0b3d4d1a3dfde23ea07fe8cde3780fd3a5c806e7d5a93593df0909326be34825940bee86104218083812f4f7e35a123047256bc396d1ec5ef0c
-
SSDEEP
3072:FYP2XerzhOUxu/XUtauF8iJkZnNySTUmmt8hVZLwBLP:Fu2urzh9xu/XkauF5JgnNDQLtanw9
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language fd5c860be7b8193379a42cc703e40fd1_JaffaCakes118.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1796 fd5c860be7b8193379a42cc703e40fd1_JaffaCakes118.exe