Analysis
-
max time kernel
65s -
max time network
137s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
27/01/2025, 08:52
Behavioral task
behavioral1
Sample
JaffaCakes118_3dea75d9db5b89b9dfbeade07c52b58b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_3dea75d9db5b89b9dfbeade07c52b58b.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_3dea75d9db5b89b9dfbeade07c52b58b.exe
-
Size
500KB
-
MD5
3dea75d9db5b89b9dfbeade07c52b58b
-
SHA1
c46c3024f857bff8aa6f4cd3639e7af6262206dd
-
SHA256
6bebba76eaaf80577684a4d1af3195f0eeb9d4435b0911d46bb760bd97396d64
-
SHA512
949bdd04ae5d4757e22f0b4b1c4fbb4823b16824cb6a7e26be9a486b95fdf357323e2cdba44c7a67e41a8c9780e48ce445c621a5a62517ee1a61cfa2d893d554
-
SSDEEP
12288:3xexIc4ZzqNFpDo6eTtPPbQ0iVuAqpc1pZMrlwXq3Mi:MxZHNFpDo7tPEMAUc1pZSwD
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2676-0-0x0000000000400000-0x0000000000580000-memory.dmp upx behavioral1/memory/2676-175-0x0000000000400000-0x0000000000580000-memory.dmp upx behavioral1/memory/2676-220-0x0000000000400000-0x0000000000580000-memory.dmp upx behavioral1/memory/2676-221-0x0000000000400000-0x0000000000580000-memory.dmp upx behavioral1/memory/2676-137106-0x0000000000400000-0x0000000000580000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_3dea75d9db5b89b9dfbeade07c52b58b.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2676 JaffaCakes118_3dea75d9db5b89b9dfbeade07c52b58b.exe