Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
30/09/2024, 00:30
Static task
static1
Behavioral task
behavioral1
Sample
ff941cddc9997aeb42ee3e2a38103625_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ff941cddc9997aeb42ee3e2a38103625_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff941cddc9997aeb42ee3e2a38103625_JaffaCakes118.exe
-
Size
32KB
-
MD5
ff941cddc9997aeb42ee3e2a38103625
-
SHA1
894f0b2054f3101a1986397d60b4cccdeffdbad8
-
SHA256
604fb69be731125adfb3392decfcf8e070ef8d3e18dd532b15232bef9df275de
-
SHA512
d3325c824c6c57f5d830b7353d239f746f4ca75748d3b03c8625526d4a38f36f3c40719612b8863af4bcd3e7deea72fd94dfbe1d0bb8d49daca1f3ba0df5c721
-
SSDEEP
384:EPyQE1MVJnMRNusKIs9F9rcUySJouitCtTQS4Pn9M7E67TLm+DGSEP4ka:E6QxVJINdc9rrckXr4PE/B/k
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ff941cddc9997aeb42ee3e2a38103625_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2236 ff941cddc9997aeb42ee3e2a38103625_JaffaCakes118.exe 2236 ff941cddc9997aeb42ee3e2a38103625_JaffaCakes118.exe