Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
03-11-2024 17:32
Static task
static1
Behavioral task
behavioral1
Sample
8cac8bc1a9e15d852aaf2d0ee8c7b348_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8cac8bc1a9e15d852aaf2d0ee8c7b348_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8cac8bc1a9e15d852aaf2d0ee8c7b348_JaffaCakes118.exe
-
Size
968KB
-
MD5
8cac8bc1a9e15d852aaf2d0ee8c7b348
-
SHA1
2b3c4836f923d26c95b829744bced8986705a9fc
-
SHA256
b1d18e4c8a13d4bfec0a6b6fb170b0775bcc1447fdf8a9c6e30a37a66f1a8f5f
-
SHA512
ae0c9b51e74377032ed9de7ee51fbf2dc0785b76f92046cf0ec7f2c5debfffc5d85e6b70bb3614c8a48f580588f0b2e473e318bdb6e3ad1ee2ab18b63d534d93
-
SSDEEP
24576:vU8zsx/SWlMdF8Glj/y7tYoraDo/ZlaXBT3Wg30VALw+7:ExRlMdaszTzkaF3LEV/+7
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8cac8bc1a9e15d852aaf2d0ee8c7b348_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1696 8cac8bc1a9e15d852aaf2d0ee8c7b348_JaffaCakes118.exe