Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
01/10/2024, 04:50
General
-
Target
046da2ebd6df16c1ac619cdf4cc9ba92_JaffaCakes118.exe
-
Size
1.3MB
-
MD5
046da2ebd6df16c1ac619cdf4cc9ba92
-
SHA1
65c688b50c779064451238a54f3cb992a1aeb2df
-
SHA256
15787e1682f48d115e433b8be96707ab5d9d367ad907143365da633afc4433af
-
SHA512
8c4cc5556464e4531b4976c83c5faa2ec629e8b8e5b4000f8cf6ce29d2d89ded07f1107360f17b2a2361f2a0949e763635cbe15cd8549a818a82e907ac8f3fc2
-
SSDEEP
24576:frJKUK/juqkncxnfS//2oYP+ENxuIW/Rjl/lVlP64htKQtsVELVDiicYQRebMyHz:f1Kb/juqgcxfSE+HIuRjl/lVlP64htKB
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\046da2ebd6df16c1ac619cdf4cc9ba92_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\046da2ebd6df16c1ac619cdf4cc9ba92_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam