Analysis
-
max time kernel
12s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
04/03/2025, 21:33
Behavioral task
behavioral1
Sample
JaffaCakes118_4fb1f98c5c0f8a58c2a330fac078651e.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_4fb1f98c5c0f8a58c2a330fac078651e.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_4fb1f98c5c0f8a58c2a330fac078651e.exe
-
Size
1.7MB
-
MD5
4fb1f98c5c0f8a58c2a330fac078651e
-
SHA1
558f478a3e7cf1683e379bdb4f74a0625cd5c4a1
-
SHA256
22c7508dfbff9a6a258eefe460b98507ece9bfabad29f638b0a490d260e6e809
-
SHA512
1e9bbd2d352d2cd6f2d3b7a88d6c376144f11273de639103a2402a6864c63f879e09f86a5bfb6669ccd6f09f01f0dd9f11504ef22af9c34c2daf460897a12125
-
SSDEEP
24576:W1l8gflJaiQJ4y9zYObwW/8GuLKXIaluWE2DTIIlcc:W1fk0WkLUIa+qIIr
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_4fb1f98c5c0f8a58c2a330fac078651e.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2076 JaffaCakes118_4fb1f98c5c0f8a58c2a330fac078651e.exe 2076 JaffaCakes118_4fb1f98c5c0f8a58c2a330fac078651e.exe