Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
13-10-2024 19:04
Static task
static1
Behavioral task
behavioral1
Sample
418fd30e4c8635bff681c7ea5aa7ae5b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
418fd30e4c8635bff681c7ea5aa7ae5b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
418fd30e4c8635bff681c7ea5aa7ae5b_JaffaCakes118.exe
-
Size
244KB
-
MD5
418fd30e4c8635bff681c7ea5aa7ae5b
-
SHA1
6604959ac033400c8b01d409163906845acde282
-
SHA256
65a36f151ad7a856309b89a7f94e255a742d2497415f96b80954d38a74715ac5
-
SHA512
545ec0c5ca724b7d4bbaa2626e197302beec282e468aa2b34a022fe2b00187eb56547e2947dfcbc1b6e6022af09c7a4ed8e76b664c1d49cc42e4e61abecfdd33
-
SSDEEP
6144:J43iNBVZ/JOzh0gmuQWF9+ZopvvniRgwZEP:J43yBVZRPgmxWMoxiBZEP
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 418fd30e4c8635bff681c7ea5aa7ae5b_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4996 418fd30e4c8635bff681c7ea5aa7ae5b_JaffaCakes118.exe 4996 418fd30e4c8635bff681c7ea5aa7ae5b_JaffaCakes118.exe