Analysis
-
max time kernel
95s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
08-10-2024 23:39
Static task
static1
Behavioral task
behavioral1
Sample
2729aab5399be5341d8018a23b2b4aac_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2729aab5399be5341d8018a23b2b4aac_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2729aab5399be5341d8018a23b2b4aac_JaffaCakes118.exe
-
Size
108KB
-
MD5
2729aab5399be5341d8018a23b2b4aac
-
SHA1
f12216a395eeffb9f21e14e039ee004c3a88cfa3
-
SHA256
5f6e695b5413a1017d0d9928bcce399a7560025f62a68de31b68458553a6d5be
-
SHA512
66d2ff6c70286221c3a855e53b27a6abb6bb6917d9e832b8407594ffcf22207e22695d6f176a54fa2e27bfbdbd498c6cef9afb345ef64ba6f94086a2f6700354
-
SSDEEP
1536:e0ekkZggj9rlDld1rZWuHbQXMRQ/cvnHGMf:NekkZggxvZNHUdKHff
Malware Config
Signatures
-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2729aab5399be5341d8018a23b2b4aac_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3340 2729aab5399be5341d8018a23b2b4aac_JaffaCakes118.exe