Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
01/10/2024, 07:15
Static task
static1
Behavioral task
behavioral1
Sample
04d29052c9a0a16fc33ca2f55fca4f16_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04d29052c9a0a16fc33ca2f55fca4f16_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
04d29052c9a0a16fc33ca2f55fca4f16_JaffaCakes118.exe
-
Size
20KB
-
MD5
04d29052c9a0a16fc33ca2f55fca4f16
-
SHA1
f8864278cd0cb56aceb820cc25d5752083ec1ae4
-
SHA256
f74bd62fee70dfc78da4a0d67c6ec88a4ab10853e1774cd57aac95b895dd021b
-
SHA512
a9b7ae623893f5c8af0b6b02eb2eff7e2b8100a9a308a8b7976f654d1c41f8bade918bba5891800072f215594b1d649bbdbe8e37b4da3710fc4f1badba6cb96e
-
SSDEEP
192:att+ELGsDi8DHbpI3RZjt9FgEmaNjZNFEb:attDD70mVaNj7FEb
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 04d29052c9a0a16fc33ca2f55fca4f16_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 944 04d29052c9a0a16fc33ca2f55fca4f16_JaffaCakes118.exe 944 04d29052c9a0a16fc33ca2f55fca4f16_JaffaCakes118.exe