Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2025 16:24

General

  • Target

    JaffaCakes118_2d77d2f577083da93c829742929be45c.exe

  • Size

    143KB

  • MD5

    2d77d2f577083da93c829742929be45c

  • SHA1

    4f4112b376961580af78c6f796412f02e3e2e251

  • SHA256

    06ed2ef13eb0584e6d71ca7e955949357850df74768330a79a3958171f1a47d6

  • SHA512

    bbc5233c2c9f3eeb7d00301d76121fe5db5f8e24810ce94c6d2f1fba22c377191f42ba5f1dd715a23226ae0357b6b25b93b779b7165b98ea4158a303f9d37362

  • SSDEEP

    3072:0Te4LldbC+2kYAI/3iNKqtgQO6nXk8c6F0gSeEsj0o95pNkydwN64yqnQsm7:WdbC+2kYpjaXkfBpsn5phuw43Y7

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_2d77d2f577083da93c829742929be45c.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_2d77d2f577083da93c829742929be45c.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1800-0-0x0000000001000000-0x0000000001026000-memory.dmp

    Filesize

    152KB

  • memory/1800-2-0x0000000000740000-0x0000000000766000-memory.dmp

    Filesize

    152KB

  • memory/1800-1-0x0000000001000000-0x0000000001026000-memory.dmp

    Filesize

    152KB