Analysis
-
max time kernel
94s -
max time network
115s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
05/10/2024, 00:24
Static task
static1
Behavioral task
behavioral1
Sample
157520c8409cd107c2a478a8082767e5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
157520c8409cd107c2a478a8082767e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
157520c8409cd107c2a478a8082767e5_JaffaCakes118.exe
-
Size
20KB
-
MD5
157520c8409cd107c2a478a8082767e5
-
SHA1
0d05d9978aa646abc2aad39e2857deae44bfe549
-
SHA256
b74652059844e3cdad330d75e1e0a56347d76c62edcafb0dcb01e88475aa6184
-
SHA512
a9bdb57d7ee5ed4d99f9a8dffe641c880e920add3cf3ee9f0cdcb2befba2911de2ca896f1cd7605e65f666dff7e8080806027d51bdf2067c832d7e1c45a5c7b3
-
SSDEEP
192:rDR+EpRCj6KKH0UgaAfgHczm+R79mH6WBGKhWqBQk+wjj0+:rDPAj48aAt4a25hsbwjj0+
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 157520c8409cd107c2a478a8082767e5_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3996 157520c8409cd107c2a478a8082767e5_JaffaCakes118.exe 3996 157520c8409cd107c2a478a8082767e5_JaffaCakes118.exe