Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
30/09/2024, 19:53
Static task
static1
Behavioral task
behavioral1
Sample
0307b71e6d0596486eb0a31e3dbd993b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0307b71e6d0596486eb0a31e3dbd993b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0307b71e6d0596486eb0a31e3dbd993b_JaffaCakes118.exe
-
Size
32KB
-
MD5
0307b71e6d0596486eb0a31e3dbd993b
-
SHA1
2ceac013a10413e414c2a11a3a8073e64a822861
-
SHA256
eeddb98970bce6c6f5fb484c512de7bc3b958b8f1321ad6381517479e828081f
-
SHA512
4691aa12a161cdf68a9e116823359719fc57d356069fc1df103d2893461b66e642268f7adcfca46c7263ed6a036a41e8ca1e0fb31219163cae5712915ca6fbdc
-
SSDEEP
384:T4s80eRBKUAVq7ySm+mttchYZz1okMXmCKQvVnFW:T8BDAVq7yR4QokEmCKQX
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 0307b71e6d0596486eb0a31e3dbd993b_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2732 0307b71e6d0596486eb0a31e3dbd993b_JaffaCakes118.exe 2732 0307b71e6d0596486eb0a31e3dbd993b_JaffaCakes118.exe 2732 0307b71e6d0596486eb0a31e3dbd993b_JaffaCakes118.exe