Analysis
-
max time kernel
94s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04/10/2024, 08:33
General
-
Target
1298d07e4e96808ecef645a960a4cfb3_JaffaCakes118.exe
-
Size
20KB
-
MD5
1298d07e4e96808ecef645a960a4cfb3
-
SHA1
4f0c7c526308d99b74a4c8834314b0a172bd572b
-
SHA256
533934b4833860e21069408190f4b758a900af68b19be70d9e42432ea786cd57
-
SHA512
aba2e2920e3d73b2dd2f2a7b52c58fd4f4730cb2af2d2af53fedebf59bece8f2b4818b6a9914e8188647ead3eeca9990119c36199dd24a00f04b4292bea380a2
-
SSDEEP
192:8PQM+CkF+qqMWBcLFwhlQOnmbSQ7LsixoDcS:8PQqj6WeLFwvQYMv7LtpS
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1298d07e4e96808ecef645a960a4cfb3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\1298d07e4e96808ecef645a960a4cfb3_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx