Analysis
-
max time kernel
148s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
01/10/2024, 19:53
Static task
static1
Behavioral task
behavioral1
Sample
07303ed228e418c0f42d0c49c92c7eaa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07303ed228e418c0f42d0c49c92c7eaa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07303ed228e418c0f42d0c49c92c7eaa_JaffaCakes118.exe
-
Size
2.6MB
-
MD5
07303ed228e418c0f42d0c49c92c7eaa
-
SHA1
12552cb9803e170cf739e8339ee693e629805f7a
-
SHA256
6f2eafce7c191390b12be4d70d7a267fa69665fa6a02b549f04abff29dee287c
-
SHA512
18762b006ae12340e86103da1a5bb7c0a88bc323df86c43965e93b40c34686ef60e87f30fca0b40155c274b9d2f5d8b293dae4c224cb40166cc7491e5d61e888
-
SSDEEP
12288:+VddFO0/8jPLk4hM6E8EkV2HUnf0ZIGepouT5D10eh:+dF/0E466E8EjUnf0IGepl4e
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 07303ed228e418c0f42d0c49c92c7eaa_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2488 07303ed228e418c0f42d0c49c92c7eaa_JaffaCakes118.exe