Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
17/10/2024, 19:00
Static task
static1
Behavioral task
behavioral1
Sample
5336efada9d3aeb753ea5e06e5fb199f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5336efada9d3aeb753ea5e06e5fb199f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5336efada9d3aeb753ea5e06e5fb199f_JaffaCakes118.exe
-
Size
24KB
-
MD5
5336efada9d3aeb753ea5e06e5fb199f
-
SHA1
62accc1e9a639514c01868416cde8a5f24c6fc93
-
SHA256
7f5066f9afb0e1db81d559b47b368605793729b134f408b7102e84f2ce971427
-
SHA512
e6ed382d16842707cc9ef23fc244442129655a79d22885c5cfef2eb4e88108fd9d6b6d7c95a424abcf082b5ccd4032f0f9be2433d51d271d4e786ea8f1922ffa
-
SSDEEP
192:QZSAKqlK0+EIfy38TucVssmGHJf8LAWAWlF5pM:52l+EIVfltpfAzpM
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 5336efada9d3aeb753ea5e06e5fb199f_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2512 5336efada9d3aeb753ea5e06e5fb199f_JaffaCakes118.exe