Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
01/10/2024, 16:51
Static task
static1
Behavioral task
behavioral1
Sample
069a844bfeafc97a09af7d2275aec2d4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
069a844bfeafc97a09af7d2275aec2d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
069a844bfeafc97a09af7d2275aec2d4_JaffaCakes118.exe
-
Size
17KB
-
MD5
069a844bfeafc97a09af7d2275aec2d4
-
SHA1
6904997c277c2dfd6298022628591cd5ae8a681d
-
SHA256
af33f1a7acbde519eccbd0e72113c4880e6952d6af6bb58867f93b5fc3995063
-
SHA512
f5223185c52795a1c7056a6d7c24b58560e7043487426a346ce6531c77dd86ae969579062d978f383e4ab64a7293436cc107dcbf3289a29e69b030fcf43f516c
-
SSDEEP
192:WqQUx2lflGY98AkTbeTrt07ssMmd+8V4hps7NsMRCZ20fah1EpywGEFDAzfE:WqQ+2lfl58QV07ssMmd+Thx53DA4
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 069a844bfeafc97a09af7d2275aec2d4_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2392 069a844bfeafc97a09af7d2275aec2d4_JaffaCakes118.exe 2392 069a844bfeafc97a09af7d2275aec2d4_JaffaCakes118.exe