0c254a5df3a474d7ff36de9220565bd3605dc4e4d9dd179926aebc52aab238ef

Analysis

max time kernel
93s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20250129-en
resource tags

arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
submitted
28-01-2025 22:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_502c929aa329a43618e5487d4d3254ff.exe
Size

171KB
MD5

502c929aa329a43618e5487d4d3254ff
SHA1

0b0de715af30242478d9e295151c674a9d508bbe
SHA256

0c254a5df3a474d7ff36de9220565bd3605dc4e4d9dd179926aebc52aab238ef
SHA512

dfbe68bbcb69931c5f8a0edddd3078cfd751f3bf53e3983f7d9b0fbca0b453db7c992daba0e115bd6830378b6e241b56f7e047fcdf6b38979a2724f42b55a732
SSDEEP

3072:pgRhPXq8b/aW2S7AxN9jt2qidhoFgug7S57a5XeOl8Zjx6lyf1chWj23U:pf8b/aFS7e9jtydhoFgug755XFuZV6ll

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4032	2836	WerFault.exe	80

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JaffaCakes118_502c929aa329a43618e5487d4d3254ff.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_502c929aa329a43618e5487d4d3254ff.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_502c929aa329a43618e5487d4d3254ff.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2836
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2836 -s 264
  2⤵
  - Program crash
  PID:4032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2836 -ip 2836
1⤵
PID:3596

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads