Analysis
-
max time kernel
93s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
30-12-2024 18:46
Behavioral task
behavioral1
Sample
JaffaCakes118_ab7f85159f0dbba84408e140826e4159a6773965c2295ebf392f24775b979ff2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_ab7f85159f0dbba84408e140826e4159a6773965c2295ebf392f24775b979ff2.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_ab7f85159f0dbba84408e140826e4159a6773965c2295ebf392f24775b979ff2.exe
-
Size
188KB
-
MD5
8e8a6b07094ee5884449f51e3c27ffd2
-
SHA1
f039cf0fea2d4e5c44d056e210b6c822bc7c6747
-
SHA256
ab7f85159f0dbba84408e140826e4159a6773965c2295ebf392f24775b979ff2
-
SHA512
bf0473fd1574487b8bb3ed18039680779c780f044f88df87bee7309c87fbe30a3ad7681f7583ef5b260873fc0125c79afd9b4e45774431ba6cbf1b819e98c9df
-
SSDEEP
3072:AyziE1g0iXelC3+J7bM6ow8ao/5xG0+mC5/2PoCXWB5nfv/T:AHW0+Rg6ow89+m8eg3t
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_ab7f85159f0dbba84408e140826e4159a6773965c2295ebf392f24775b979ff2.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2368 JaffaCakes118_ab7f85159f0dbba84408e140826e4159a6773965c2295ebf392f24775b979ff2.exe 2368 JaffaCakes118_ab7f85159f0dbba84408e140826e4159a6773965c2295ebf392f24775b979ff2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ab7f85159f0dbba84408e140826e4159a6773965c2295ebf392f24775b979ff2.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ab7f85159f0dbba84408e140826e4159a6773965c2295ebf392f24775b979ff2.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:2368