Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
24-01-2025 17:50
Behavioral task
behavioral1
Sample
JaffaCakes118_23ef27c1cd8388f871e0c7ddd4eef2ce.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_23ef27c1cd8388f871e0c7ddd4eef2ce.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_23ef27c1cd8388f871e0c7ddd4eef2ce.exe
-
Size
880KB
-
MD5
23ef27c1cd8388f871e0c7ddd4eef2ce
-
SHA1
62bb538908d03e72add9402c01d42dc15d861ea1
-
SHA256
0209bcb23a2adf0c44b367bcf8ef066e2535e035da2648fb9bf093e884213474
-
SHA512
eca46327f8c86ea5ad9f416a59b953772009f62b31dc174a9d5202ba4b61417daa5486dae9a18bc0521116b8e9c0a835c1bad479371b42e3e258e51ed2bbf83a
-
SSDEEP
24576:494GN7fiIEAeLHJx0I7ab2CCdslNd474mfd:494GN7fiIEAeLHJx0oG2NdsvOPfd
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_23ef27c1cd8388f871e0c7ddd4eef2ce.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2604 JaffaCakes118_23ef27c1cd8388f871e0c7ddd4eef2ce.exe