Analysis
-
max time kernel
93s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
29/09/2024, 18:07
Static task
static1
Behavioral task
behavioral1
Sample
ff15dc7894d521560410808863aa817e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff15dc7894d521560410808863aa817e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff15dc7894d521560410808863aa817e_JaffaCakes118.exe
-
Size
944KB
-
MD5
ff15dc7894d521560410808863aa817e
-
SHA1
a9666f58057939dc852cf95f31cd1a1f9c884894
-
SHA256
3cc28758699bbadd9a1d9468ee0432198915b168f078d8f13800e095222c57d8
-
SHA512
8c5d61a2ed4df157bd825795a773ea7b3f1498b1e926029616baaec082231ea866aff0b1e7c09373d8c7a8d2f02494518a9c1690ca2811ce4ad04b61b24fc79e
-
SSDEEP
12288:aBceWDCbqzKaa1ioIAKnWorXSSRe8CBv9302g1GF5EuouVTVXJTWz7oALWSh6nUZ:5DCOnAMl6e
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ff15dc7894d521560410808863aa817e_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4212 ff15dc7894d521560410808863aa817e_JaffaCakes118.exe