Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
12/10/2024, 20:49
Static task
static1
Behavioral task
behavioral1
Sample
3bf8ceeb7d324ab27d9a4948d9a7c239_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3bf8ceeb7d324ab27d9a4948d9a7c239_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3bf8ceeb7d324ab27d9a4948d9a7c239_JaffaCakes118.exe
-
Size
20KB
-
MD5
3bf8ceeb7d324ab27d9a4948d9a7c239
-
SHA1
2fc2475623b3d48f60fa8ccd08f700ccd94d10d8
-
SHA256
d7efd091c50ffb64c91c2e954a3dd263e430df984a3575cb380692c0be720252
-
SHA512
29735849192c27cd15bfd40eddb24becd5527fb0a9f3fd4e479369862d44116e2bd678e9e2b0d554f8c0df7298daf04b8d973ff5c4223c5c03710d3e8a0825dd
-
SSDEEP
192:Cp12+gTWvGfG3CYwJygPfgCMiTwlbMQN8LMAsT93YOUdc0XFX:614xfICWggAUqMAsT93YOUC0XFX
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 3bf8ceeb7d324ab27d9a4948d9a7c239_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2368 3bf8ceeb7d324ab27d9a4948d9a7c239_JaffaCakes118.exe 2368 3bf8ceeb7d324ab27d9a4948d9a7c239_JaffaCakes118.exe