Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
03/10/2024, 18:26
Static task
static1
Behavioral task
behavioral1
Sample
1010ba8c96abccfb0963d4d8b52a8630_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
1010ba8c96abccfb0963d4d8b52a8630_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1010ba8c96abccfb0963d4d8b52a8630_JaffaCakes118.exe
-
Size
36KB
-
MD5
1010ba8c96abccfb0963d4d8b52a8630
-
SHA1
4a7b1f67befb4f7690c9bad179c0d223df2c1f29
-
SHA256
b050355fab50972b24cc9ecdc330025836618556e769ede0533f1268beff2fcf
-
SHA512
6f77b0e3fec50135ed00053cf1a0d896007e8221f4f138a2408423756e8c3cb87846dff54eed832211ed9628607312069e619f7ee5a73aa19857d88093cf38d6
-
SSDEEP
384:qulrWOn4rDKr4BOrjsTwYUih9i+NoZBi5ZyzFAloMsAQeD:qvOnQDKr40jSUY7eZBi5RoqN
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 1010ba8c96abccfb0963d4d8b52a8630_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2544 1010ba8c96abccfb0963d4d8b52a8630_JaffaCakes118.exe 2544 1010ba8c96abccfb0963d4d8b52a8630_JaffaCakes118.exe