Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
30-09-2024 19:22
Static task
static1
Behavioral task
behavioral1
Sample
02e9bff7a874b3473acf21f3b0cc740a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02e9bff7a874b3473acf21f3b0cc740a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
02e9bff7a874b3473acf21f3b0cc740a_JaffaCakes118.exe
-
Size
95KB
-
MD5
02e9bff7a874b3473acf21f3b0cc740a
-
SHA1
a89f0671456d731c50c4a092d2fc2f5f199cbf70
-
SHA256
eab728e4513ff4c19fe733fac09adcb14cb3809146af5a79c153e60e6a45bfdc
-
SHA512
6b876f0b4249e55b3574e76231c0b3de96bae32443ead0315f998546daf82fdb5630a84d270f64a89527c7b467d512320d262409abff556fb7ae3d03879033de
-
SSDEEP
1536:FhpgmEFZWOmz4W5WZo+gA4i10yUppATHJfCseQV4rwoqEM+2DujGstbiYlA1eruY:VADaWZo+8iK7AJf/ywoz2uddJ+4rFpHt
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 02e9bff7a874b3473acf21f3b0cc740a_JaffaCakes118.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 2192 02e9bff7a874b3473acf21f3b0cc740a_JaffaCakes118.exe