Analysis
-
max time kernel
139s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2024, 20:48
Static task
static1
Behavioral task
behavioral1
Sample
441da7272b12745deb8dde34686727d5_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
441da7272b12745deb8dde34686727d5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PROGRAM_FILES/Baidu/Toolbar/BaiduBarX_Tmp/BaiduBarX.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PROGRAM_FILES/Baidu/Toolbar/BaiduBarX_Tmp/BaiduBarX.dll
Resource
win10v2004-20241007-en
General
-
Target
441da7272b12745deb8dde34686727d5_JaffaCakes118.exe
-
Size
442KB
-
MD5
441da7272b12745deb8dde34686727d5
-
SHA1
8ce6b1f8c44e8bfac7cde1172b442ea11aff5dfe
-
SHA256
7994b12a8afc3dcd3db88640753e52bb41fe5df1e21ff9b7f1e3544971cd34c6
-
SHA512
bcfd9f06e657567c1b2fccb8c751ec945a657d10b1c7313955850e7e8352101130ae3f3bb6eac4addfad00775f6bb8f2fc1208d8a51e995fba47b3ae2390bf5b
-
SSDEEP
12288:Rpfnz4BHkKnCCNlgkjnyxceo2S1WHzrxyFAdTe:Rpr4kKnCGlgKnyIOTrxCAc
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 441da7272b12745deb8dde34686727d5_JaffaCakes118.exe