Analysis
-
max time kernel
91s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
04/10/2024, 19:36
Static task
static1
Behavioral task
behavioral1
Sample
14ac4d03e52668c593462ec554f5aed9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
14ac4d03e52668c593462ec554f5aed9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14ac4d03e52668c593462ec554f5aed9_JaffaCakes118.exe
-
Size
128KB
-
MD5
14ac4d03e52668c593462ec554f5aed9
-
SHA1
9d7e5b98aca121d16103286305600ff173e9269c
-
SHA256
fc938fbb55091f4754fc3d164d50e280a9df38d8819193800f1e1a9d0f13672a
-
SHA512
61322e7a54daef9f8c8209b9dace846ab70f964efd1cf51346a544c2168a69f31171f00b1639ce813a9e9d244957db98edd825462b7b8b5ddfa29309d7e79109
-
SSDEEP
768:gDbM0G1aIeMT2eaxg83PuUeqTaeBBW+9BkhtLxzjroQTo2jzr/fDHLVQIAxQQ:gnMDaacg8GtyTlML1VfjLHlAT
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 14ac4d03e52668c593462ec554f5aed9_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4016 14ac4d03e52668c593462ec554f5aed9_JaffaCakes118.exe 4016 14ac4d03e52668c593462ec554f5aed9_JaffaCakes118.exe