Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09-10-2024 05:35
Static task
static1
Behavioral task
behavioral1
Sample
2bcd76f6ef9f4cbcf5952f62b9bc8a08_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2bcd76f6ef9f4cbcf5952f62b9bc8a08_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2bcd76f6ef9f4cbcf5952f62b9bc8a08_JaffaCakes118.exe
-
Size
35KB
-
MD5
2bcd76f6ef9f4cbcf5952f62b9bc8a08
-
SHA1
fd2d4f4ec3ca0489abd6c1a9862229a37f6110f8
-
SHA256
82f26aa037ab15614b6eccdf2b78c0a2c5a57a7aecfb54ebc954c8f190793b99
-
SHA512
32afb703903d1947953b6cdc88abb49f3e2599b83163a2754dc896f25b919de2ad12ae52a015da8e10996d6159635edad5455b6492386d789c1b35c801356450
-
SSDEEP
768:nuQOMOblq88qL0f7f0326eI8d0otpR0RfNs+IR9qBDvjChd4MT:LbOlSM3QxCBs+ILi7jeFT
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
2bcd76f6ef9f4cbcf5952f62b9bc8a08_JaffaCakes118.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2bcd76f6ef9f4cbcf5952f62b9bc8a08_JaffaCakes118.exe