Analysis
-
max time kernel
16s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
15/10/2024, 05:53
Static task
static1
Behavioral task
behavioral1
Sample
4626e1c41b561840ae45261b8e9797e9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4626e1c41b561840ae45261b8e9797e9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4626e1c41b561840ae45261b8e9797e9_JaffaCakes118.exe
-
Size
156KB
-
MD5
4626e1c41b561840ae45261b8e9797e9
-
SHA1
e4fcfa4a29c7770557936333e643b5430c26ac05
-
SHA256
717c5affe58a7d475649159436d4d6cb986b490b66cd86bbaa27614439ffbf59
-
SHA512
e7714b0b1436c1e2c8d9fd98e9c93afc54a5e09c8cac621b5b092f8823a4fae9e538f4f132504d0edcfe22252e86ebf0b0fc62cf996f406256e9e4cceb1e41d0
-
SSDEEP
1536:18+f6bjRNF5/ZSF67ReWTLMMlD4MI98Uvb7sZoYAIsSPtL7jM5TfWjxJ/HAd:O9bjnxlewLly8UT7sSYAyPtWV
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 4626e1c41b561840ae45261b8e9797e9_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1456 4626e1c41b561840ae45261b8e9797e9_JaffaCakes118.exe