Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
29-09-2024 03:42
Behavioral task
behavioral1
Sample
fdbba989585414bc02bbfb35a00948a3_JaffaCakes118.exe
Resource
win7-20240708-en
windows7-x64
1 signatures
150 seconds
General
-
Target
fdbba989585414bc02bbfb35a00948a3_JaffaCakes118.exe
-
Size
20KB
-
MD5
fdbba989585414bc02bbfb35a00948a3
-
SHA1
daf40be8e21256073031a8a76cc55d8f74ffd8e1
-
SHA256
ad215a9f90fdff29ff2ee70e494c29a1a6529278cba4c5b61c2a9b9763fc159d
-
SHA512
6b8ef5f6d07861e628c1e3bb68140cd43811022d5ae9fdc23b91ba96ee4fff955b689bc1b235f5a5b5c19d6a7bc02954854448d980145e92b1f3ac63aa257540
-
SSDEEP
384:Xjca+6/T8zA3tk1WOIL8odLwvYDm5uqneZIFA8yyYLp5vS:XjQ6/T8c3twWOA8oCEUjFBup5
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4008-0-0x0000000000400000-0x0000000000412000-memory.dmp upx behavioral2/memory/4008-2-0x0000000000400000-0x0000000000412000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language fdbba989585414bc02bbfb35a00948a3_JaffaCakes118.exe