Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
02-01-2025 13:39
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_657e840c027a6c8eaf958cee20ebaf2d.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_657e840c027a6c8eaf958cee20ebaf2d.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_657e840c027a6c8eaf958cee20ebaf2d.exe
-
Size
406KB
-
MD5
657e840c027a6c8eaf958cee20ebaf2d
-
SHA1
eec553924c9cae436a0170b2d3cbf9d5321242c0
-
SHA256
5483834382781507cda0a37caa8ee98a0b48166d7db5dc040bfcc19c41212628
-
SHA512
4e7231d37805c3a1df853cb71b75c4e9705db2857859c6bc22afd2d04343473e70be0ff9a5707ab3ee3cca09469260c116deef2272a5c90db35482787484eadd
-
SSDEEP
12288:dvqlqSrzEAupLiPuSrN0rMaAg74Z/R2/6LM/5OPOOYp+Bb:JsqSroAupL8uSrOrMXfbPOOC+B
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_657e840c027a6c8eaf958cee20ebaf2d.exe