Analysis
-
max time kernel
94s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
02-10-2024 01:35
Static task
static1
Behavioral task
behavioral1
Sample
0846672dd199f76fc06ff608a27d5718_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0846672dd199f76fc06ff608a27d5718_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0846672dd199f76fc06ff608a27d5718_JaffaCakes118.exe
-
Size
120KB
-
MD5
0846672dd199f76fc06ff608a27d5718
-
SHA1
65e03afa30b0dbbc031b98e5f7b7f66c87c58ffd
-
SHA256
ae5264d014c4ff4803a22c3086b2ce94677eac07b6022c4b55326b18071b09f3
-
SHA512
c053404b0fea0335a7d02053ccd3c3eb849d78d02e70b62a4fad7fe96501ccaa5e31bfa6cd9c831289aa9c18f2d9249580c543dbf6a6666f4b62183211d19c7b
-
SSDEEP
3072:l7hqy6lFz7lyQsl73ktX+r06KGYf76G5oQkKu:RhqyKds9U1+r06K7toQkK
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 0846672dd199f76fc06ff608a27d5718_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1116 0846672dd199f76fc06ff608a27d5718_JaffaCakes118.exe