Analysis
-
max time kernel
95s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
04-10-2024 22:24
Static task
static1
Behavioral task
behavioral1
Sample
152225bd68c5d4beeb54b1479bf26337_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
152225bd68c5d4beeb54b1479bf26337_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
152225bd68c5d4beeb54b1479bf26337_JaffaCakes118.exe
-
Size
36KB
-
MD5
152225bd68c5d4beeb54b1479bf26337
-
SHA1
26df51fcd082a17818e42fbf9cc5654e8f1728bc
-
SHA256
8a513580873170afa0e36bfe994a38ffc033359e7ba4d5d1880b1515a0542f37
-
SHA512
3af11067af90dafab1a81130969aed016cb069143c1dc3b04b023dde9fa57914e7eb7f7c8419e63d52e28937177805281abf22e15443337e5f3e1a0b8e82117a
-
SSDEEP
384:M6SrM3v8bFvpvawaOi/+w1yUlGnUc7lOxfYr3p0mhfpJJW:M9jFvpvawaSw1/lDKCmdfQ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 152225bd68c5d4beeb54b1479bf26337_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2996 152225bd68c5d4beeb54b1479bf26337_JaffaCakes118.exe