Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
08/10/2024, 21:37
Static task
static1
Behavioral task
behavioral1
Sample
25ce4b9c2e571e19aa702f226338a58f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25ce4b9c2e571e19aa702f226338a58f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25ce4b9c2e571e19aa702f226338a58f_JaffaCakes118.exe
-
Size
449KB
-
MD5
25ce4b9c2e571e19aa702f226338a58f
-
SHA1
173cc8cae393fd29e451bc68fe449c9ea657cbaf
-
SHA256
f30c121672d81252fd37d9cae439165887b1696091dc24f04ef6d8ddb97dbca9
-
SHA512
e8851538823a8de4f30ca8cbc3d7d2bf439d53c416c9d81b8b7ddeeb49ff1b5ac2d6d1c3e8c87df6f45aa55ba233394adabe7df169ccdd8d757ace2e172b3d45
-
SSDEEP
6144:px/lbz1KMnwO0T/2OssojVRrtf7KKf8HnAhq/+aBxaxFT7u+ZqYywOvJYw9Lbc9m:xVKqn0TeOssq9fThqmaGxsJYw90YJ3
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 25ce4b9c2e571e19aa702f226338a58f_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1564 25ce4b9c2e571e19aa702f226338a58f_JaffaCakes118.exe 1564 25ce4b9c2e571e19aa702f226338a58f_JaffaCakes118.exe