Analysis
-
max time kernel
79s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
04/10/2024, 07:03
General
-
Target
125289c6e3f9efe241b79882f5dc12b0_JaffaCakes118.exe
-
Size
528KB
-
MD5
125289c6e3f9efe241b79882f5dc12b0
-
SHA1
9862e9d2adef43baed1fb1bc480e0f19209aa47d
-
SHA256
32673005ef9c99f1e91ae41932cef86531bca0ab162da45b6811d6c56eb1553b
-
SHA512
ee0ed26d42572fa03e6fa6762da6ddb33d5a41d38d2096541e260d7a1da4e61f4ba033ba28076f6f16f9793860939e5ce4e113ad1f1bc86489cf8c2877c2babb
-
SSDEEP
12288:PZlzgyos4qTO2GZD+v9usPbD/hRzjx83Xu0/7:LSRW3P3/hRz0uE
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\125289c6e3f9efe241b79882f5dc12b0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\125289c6e3f9efe241b79882f5dc12b0_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx