Analysis
- max time kernel
149s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
04/10/2024, 19:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe
- Size 64KB
- Sample241004-xsbbmavhph
- SHA256 c776c697de43be5877d54f88178bde21d910faeb41c011db24606d90b2ff63c8
- MD5 1496583bb24e3c475bd390191db086a2
- SHA1 d2cde94152fde131a5268071f0a041075f48ed6f
- SHA512 db9116d9a0a84f5e9f6999a7f063cedcc0be0f2fbeb3d6e8017446d13731aabcc21e27d62b02c01bd02e65dbc24c6af7c196353491b766f74105c804de24a9fa
- SSDEEP 384:xMY7vD0lAbq6S1+x5fuTrSyc2zpzeNoURl8jWabLGI4KOSo4Dl0uxwF3q:xz7vDRblrTGC2iN1l8LnpxlLlI6
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe 4644 1496583bb24e3c475bd390191db086a2_JaffaCakes118.exe