Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
09-10-2024 09:57
Static task
static1
Behavioral task
behavioral1
Sample
2f18b172fef40339de3e77a40af5935e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f18b172fef40339de3e77a40af5935e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f18b172fef40339de3e77a40af5935e_JaffaCakes118.exe
-
Size
54KB
-
MD5
2f18b172fef40339de3e77a40af5935e
-
SHA1
3a5b52212b3dfd7069dcc28c5209ebd848dda094
-
SHA256
8a5adf966e8c954fe9edbe79dad2a7ad4d0db6ed8279c8f7b60379b6541dd41b
-
SHA512
e1d73f49e4cb8424ada56441220e71744760cabf36da54c0ad24c9eb16ccf9b608146be368744bd318501731fbbebf63ff37698516a30e714a795022dee41813
-
SSDEEP
1536:inzwW13qUFvD8KBW/V+uqbykJpxC9zepoaZpjXGhfAPf:qzwI35l8KBsnWk9ey0Ehf
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 2 checkip.dyndns.org -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2f18b172fef40339de3e77a40af5935e_JaffaCakes118.exe