Analysis
-
max time kernel
94s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
28/09/2024, 14:05
Static task
static1
Behavioral task
behavioral1
Sample
fc7507f3ff50b047726d0d9342bf0727_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc7507f3ff50b047726d0d9342bf0727_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc7507f3ff50b047726d0d9342bf0727_JaffaCakes118.exe
-
Size
56KB
-
MD5
fc7507f3ff50b047726d0d9342bf0727
-
SHA1
93f9f22aff2fc8c94e1957fdb29ff0b1722af3d8
-
SHA256
4de27a9b6f97d8dbae3a8314f44406c10c8b0045ff3ff2d790d37308822fde94
-
SHA512
0020e9a2aa6c10ee30f3ece1f67fd30b6cf7a3a7f53a3995a6e10c7294f57d95fde4c2157a2bfd2a53082f96ab6a7c201438ef713b40e1529a516cc6b6c69fd3
-
SSDEEP
768:vT9oJUQpDe7TehMY9KNAL/c60cYiXYUNJ7w27+gC95LvYi:vcZVMY9KNc1XD/7rs95Lwi
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language fc7507f3ff50b047726d0d9342bf0727_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3516 fc7507f3ff50b047726d0d9342bf0727_JaffaCakes118.exe