Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
29-09-2024 13:02
Static task
static1
Behavioral task
behavioral1
Sample
fe960406b47de8b2fc6fc81d921a59cf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe960406b47de8b2fc6fc81d921a59cf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe960406b47de8b2fc6fc81d921a59cf_JaffaCakes118.exe
-
Size
104KB
-
MD5
fe960406b47de8b2fc6fc81d921a59cf
-
SHA1
5f1f8c1aa24404552b650f11cbfaa5f25bd327b6
-
SHA256
6fd566373fc58dc84068fd91261d72e1d2f42d27344b2ac8f590cba930dfea28
-
SHA512
2842c218ac354c5266f95f480453c45107105a63cd3b06a8624a3bf7689c7a8feba6f110bfb22dda48598578212472105dba993d88005c61005fcfd4d0849e24
-
SSDEEP
1536:O2lWmVqNP3xbTCDelF8WTtHJSQuAR2ZIFk+KtFntP+oa8HhQFjYGyZ7URYK:OMIFTCcO+N0
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language fe960406b47de8b2fc6fc81d921a59cf_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2296 fe960406b47de8b2fc6fc81d921a59cf_JaffaCakes118.exe