Analysis
-
max time kernel
142s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
04-11-2024 00:25
Static task
static1
Behavioral task
behavioral1
Sample
8e3e5a4b416091a72b3a861c5393fec3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8e3e5a4b416091a72b3a861c5393fec3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8e3e5a4b416091a72b3a861c5393fec3_JaffaCakes118.exe
-
Size
425KB
-
MD5
8e3e5a4b416091a72b3a861c5393fec3
-
SHA1
be2f0df81ef450287f56b1a40445dc8f1fbcdef3
-
SHA256
1485b843e94e04eab3bbb59e6131f53bb9b10b260fc87591621dbc1996ea7647
-
SHA512
0b58aaebd261b71b7b7ae22f06633fefc8fda6f0844150d06c35402e22c6464605a8644881956fc81225a21c47ad78fd855e1aab177d15302d822602ce7a08d3
-
SSDEEP
12288:15SJzw+aV+6d+TE+5G+IW+h/+7/fPHKXqn1bjNS/t+R6pikSvCZRLJF:v1BVJcQk/Iq5MYAp5JLX
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8e3e5a4b416091a72b3a861c5393fec3_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1328 8e3e5a4b416091a72b3a861c5393fec3_JaffaCakes118.exe