Analysis
-
max time kernel
93s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
06-10-2024 13:24
Static task
static1
Behavioral task
behavioral1
Sample
18452bdeab23503f660acab2fa0786d0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
18452bdeab23503f660acab2fa0786d0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
18452bdeab23503f660acab2fa0786d0_JaffaCakes118.exe
-
Size
110KB
-
MD5
18452bdeab23503f660acab2fa0786d0
-
SHA1
43cd4c31eefd4a2784edc6c0170b1156ed33129b
-
SHA256
e4c2580239e240cb4d6b9594bc80c3d340cffec4839f61a8a5bea3a81ad901e5
-
SHA512
cd70813230f802ba3457c8603cdc034740f04a97f4db4cf0ad02a9d12716440ff4c292a89fdd36cb95eb9280ee055e1908dee5daaf720cf3d3f70f8e83d83618
-
SSDEEP
1536:NPx/CJAmx2/W5Ebnto4tmJg8/ZmgGa8jkUCsROuOkyTwBVJKBIG/P4Y9v4/5lnG5:5x6UW6tpmJ03a8j8jTt6I72PGU9M6d4
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 18452bdeab23503f660acab2fa0786d0_JaffaCakes118.exe