Analysis
-
max time kernel
15s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
02-10-2024 00:15
Static task
static1
Behavioral task
behavioral1
Sample
0803c19b9a48d67020988263541c185c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0803c19b9a48d67020988263541c185c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0803c19b9a48d67020988263541c185c_JaffaCakes118.exe
-
Size
1.7MB
-
MD5
0803c19b9a48d67020988263541c185c
-
SHA1
1a01ae68bbd9457fb9b4719972075535be2c1f3c
-
SHA256
35561bcca2393a262298023e55073c04ba9c291d7f4177c00f338e1fa9a50f1e
-
SHA512
71950e00b2fdf43f2855c5a36994f03f37d15694021667677a06208b79d6fa829434860974c1f86af0fefec9816507e7734bb68d297be8254642b9ecbd823ca6
-
SSDEEP
49152:1ZvtZXGhn/CJTvEE6OtSZcuBkAkDcbVZX5u0vN:B0hn/C96OtgcZYZI0vN
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 0803c19b9a48d67020988263541c185c_JaffaCakes118.exe