Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21-01-2025 18:56
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_06c1d49eaddf3f6653237f830bea8c99.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_06c1d49eaddf3f6653237f830bea8c99.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_06c1d49eaddf3f6653237f830bea8c99.exe
-
Size
186KB
-
MD5
06c1d49eaddf3f6653237f830bea8c99
-
SHA1
9e0e2ee5378a067d646945233e20291546c392d4
-
SHA256
d47eee00db301789760d2bab711a9d9a8dc5d367a636a5e75a5bbc46248c949f
-
SHA512
2ea6fa587958fd37b8016ae1e89b93eee5712ed1deabf5be507d419335b6b67dbcac8289c1298fc36247266d0346438bf51433a4654426e93c79d664a22044a9
-
SSDEEP
3072:RTy+3kYEajtqC2k9JBFbUhb6NwWjA8APY3ih5i+fMyWETqWxCB7iDI5ZQYGty3TB:RTt3kYEOtqC2aJBFbUhb6NwWjAvv7LM9
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_06c1d49eaddf3f6653237f830bea8c99.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4376 JaffaCakes118_06c1d49eaddf3f6653237f830bea8c99.exe