Analysis
-
max time kernel
94s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
01/02/2025, 13:56
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7272eaa4942abe2950d745d86c076fdb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7272eaa4942abe2950d745d86c076fdb.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_7272eaa4942abe2950d745d86c076fdb.exe
-
Size
292KB
-
MD5
7272eaa4942abe2950d745d86c076fdb
-
SHA1
bae63683f122daafd47781203f0a2df040f17d82
-
SHA256
74a0fdfeae207ad0802ef942adc88f622e0a4ab940b6ed51ae48376d4e15d2fe
-
SHA512
3c088566d68159fd22ce597c3542593e2864aa6b786592c3a8961914b51f0d886fb8ef78f25aa16fa945c4503e117b234f655dcfb79693b392d363724f956723
-
SSDEEP
3072:B0TzOJLMoUlJUFcv3dSp+pLF9wm8icepsXFQoQLkd884RdUUAHX0+FhW2MyyyA8a:ZsUFcFSsP5QAo+0UA30+FQ2OMfKNA
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_7272eaa4942abe2950d745d86c076fdb.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2904 JaffaCakes118_7272eaa4942abe2950d745d86c076fdb.exe