Analysis
-
max time kernel
91s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
02/10/2024, 01:59
Static task
static1
Behavioral task
behavioral1
Sample
085a908fea73032eee6687bcdf992ba1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
085a908fea73032eee6687bcdf992ba1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
085a908fea73032eee6687bcdf992ba1_JaffaCakes118.exe
-
Size
11KB
-
MD5
085a908fea73032eee6687bcdf992ba1
-
SHA1
a767544f849593646645a823b2a3ab61c61a8567
-
SHA256
06b0f9d7cf32c86194cfdf65a19f30c6b5dee185ac9201afa5aff28d6e3c51ab
-
SHA512
0f4a1257a27d037ca44d0643d0a46c73ff76b5cd9ccb07e6bf0a198f06cbc4a3a363f3fc14c339cf01d5e7057f3b35b10d361a43a97b24a4ede68bfb978db42c
-
SSDEEP
192:J465B4NS0Z8rjxXngzVPz3Ol6uMBSHUay0TEQ8WhXiPxoLs4ZHNQVH:JjmS06xXghPz346uMBSHUay0TEQ8WhXC
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 085a908fea73032eee6687bcdf992ba1_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2440 085a908fea73032eee6687bcdf992ba1_JaffaCakes118.exe