Analysis
-
max time kernel
136s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
17/10/2024, 16:41
Static task
static1
Behavioral task
behavioral1
Sample
52a9fa660e532f93dc5db61c6fa51913_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
52a9fa660e532f93dc5db61c6fa51913_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52a9fa660e532f93dc5db61c6fa51913_JaffaCakes118.exe
-
Size
208KB
-
MD5
52a9fa660e532f93dc5db61c6fa51913
-
SHA1
b6325fe7e168e620900a19c77b1c8cde175a87ee
-
SHA256
7538d661e669374234fc6b580ac02f369634138baf100162858c80ccd78f24bc
-
SHA512
2c1894af6a092a37a91439220baa7825849b6969011c6da92f8ad241d1a702d478eabd1fd05362eb6e60e141d39ff544fb5b64ee7d53aface0806ba65537cde3
-
SSDEEP
3072:IDAxmKZV78r2N6WoZZcnys7SpG3DTrnE+mZDBH75UK4xZKrlsGonJNfSjIbgrZt0:IDAxmq8r+CZcnysdcddUYrenJNqbqd
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 52a9fa660e532f93dc5db61c6fa51913_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2848 52a9fa660e532f93dc5db61c6fa51913_JaffaCakes118.exe