Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
04-01-2025 09:31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_78f03c47aa702cfdaa81eff979ec8e9f.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_78f03c47aa702cfdaa81eff979ec8e9f.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_78f03c47aa702cfdaa81eff979ec8e9f.exe
-
Size
340KB
-
MD5
78f03c47aa702cfdaa81eff979ec8e9f
-
SHA1
0207e66f7d93f2ffb6f12a6abdba31be0c3fa4be
-
SHA256
6687316da6f6ebfcd353f0a4b62e2dc2bd0a3630a44de0aa15226af5b6344d98
-
SHA512
4ec013d1fa8f5e0b2228438ecf576ae0625e05da44b91ec19d8969cb8a33af9981581871137f4f0c0d51675ca5d6db113dad5ce56b481e8a2a36916b16722817
-
SSDEEP
6144:6Aqc3N5yctzMxwypx0R6+6nZF6+oxx9A+I9iv004i5dqTruX:QGNcclCwS26+6nZnGvJIli5E2
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_78f03c47aa702cfdaa81eff979ec8e9f.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2716 JaffaCakes118_78f03c47aa702cfdaa81eff979ec8e9f.exe