Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
03-10-2024 17:54
General
-
Target
0ff59965181a48f3fb83e95326f3ece4_JaffaCakes118.exe
-
Size
24KB
-
MD5
0ff59965181a48f3fb83e95326f3ece4
-
SHA1
299747dbbca83af388f7cd4e7da953abef9899e9
-
SHA256
12df7ca5b89d94ad1b8976eb1d2528b252f1c12dec7e47022fb861fe1d64cc2e
-
SHA512
046211d73a05c90aa4e7490a4dceab069e60ae13a45569f0d7dc3d36951aff66fb75c6ea75216ca76a8c5d33c01967a059555ed7c855deb327ded2d6a6770484
-
SSDEEP
192:SVnbojuE2/qOpyeXG1KEZkIG3P/6Otapi7DBTCdmS4rH5lf6SBWmRoynx1P+bDsY:SvE2yOYeXidq/Epi7pCd8z5WmRP48
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0ff59965181a48f3fb83e95326f3ece4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0ff59965181a48f3fb83e95326f3ece4_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx