Analysis
-
max time kernel
144s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
05/10/2024, 08:43
General
-
Target
16fac9fda51ce05b173b4279a3d18c64_JaffaCakes118.exe
-
Size
44KB
-
MD5
16fac9fda51ce05b173b4279a3d18c64
-
SHA1
abb6a5d611e514ec52eba293e70f35780e0810ea
-
SHA256
cde3cbc55b0578ab41ca3c50f33888202de829cb7b5fc1c933c6cb32e9e2e029
-
SHA512
23a2dbf7cdf7c08aefc730f3b0ec8637a5f2826e94779a23655006ee5e186edb9b88558130b002dfcea48fa7feba4623b317c945b9a7a0ce41e4fa4b9f25f313
-
SSDEEP
768:K8bs24qawfOHNAM75P1I/A2JIiSoWp6BB9w:3s7nuMFtJ2JIikpes
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\16fac9fda51ce05b173b4279a3d18c64_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\16fac9fda51ce05b173b4279a3d18c64_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx