Analysis
-
max time kernel
147s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
01-01-2025 02:48
General
-
Target
JaffaCakes118_447680709f1a10e68bd5d3c16a0d35b9.exe
-
Size
416KB
-
MD5
447680709f1a10e68bd5d3c16a0d35b9
-
SHA1
427cb5d421f308ca22cd0d8fd4459519e3ed4924
-
SHA256
e2279f8c70121685d8895ceff6611e07ed19e2bdbd8869c02e3de3533f6a4fbd
-
SHA512
5631906639fd282d6059571d124d8721da8a09066b633003e72576549a8b9eac18a5f63e0952c6be842fc44f624a29a979d8eabc1844a8c60dcfa7594223d753
-
SSDEEP
6144:6VOFpfTNHxOQCh9u96DncKfZqEcIJVLYww89yIRAOU+/XpcBDcBMOk:6VOFpbNhCy6wvEBJVkwLjq+RcXOk
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_447680709f1a10e68bd5d3c16a0d35b9.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_447680709f1a10e68bd5d3c16a0d35b9.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage