Analysis
-
max time kernel
131s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
04/10/2024, 18:16
Static task
static1
Behavioral task
behavioral1
Sample
146fad7cec98b3731df1c3e27c649206_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
146fad7cec98b3731df1c3e27c649206_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
146fad7cec98b3731df1c3e27c649206_JaffaCakes118.exe
-
Size
292KB
-
MD5
146fad7cec98b3731df1c3e27c649206
-
SHA1
99a180414a9e20f7e921f3536abc7bddc5510e1f
-
SHA256
9772adf304c44c0c0e43faef7a58614359ad3d7155b2d5d5bc18678b271fcd49
-
SHA512
61a9d03a5e68a71fd9d63fbd2c22f6ca1d776a259601e6cc1e76eb2cbcd80cee3a1ec82d669209ac6e3553f305994e20a6aa61622aac8a7f10cd6d3a3857ba28
-
SSDEEP
6144:oXkPC5XvxwKdcA82ErcFvjipqbIjoimSLTPUox0:oXkuX5d78BrcFvjipaIjoALLUI
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 146fad7cec98b3731df1c3e27c649206_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 1120 146fad7cec98b3731df1c3e27c649206_JaffaCakes118.exe 1120 146fad7cec98b3731df1c3e27c649206_JaffaCakes118.exe 1120 146fad7cec98b3731df1c3e27c649206_JaffaCakes118.exe 1120 146fad7cec98b3731df1c3e27c649206_JaffaCakes118.exe