Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
10/03/2025, 12:21
Behavioral task
behavioral1
Sample
JaffaCakes118_5f1adae69a5d015194200cd1614aa23e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_5f1adae69a5d015194200cd1614aa23e.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_5f1adae69a5d015194200cd1614aa23e.exe
-
Size
996KB
-
MD5
5f1adae69a5d015194200cd1614aa23e
-
SHA1
f63b94d9ec9fd2a8cc17397e64e1de30c98a4bd6
-
SHA256
91392187125a89be55f3865c7c145ab22c5f231ea1fcb0cb60313114a3f7bdd9
-
SHA512
4174a1b00c72f37864c7e799abe7d6e633136bff5c22c8e8ce4eb9c2788a0b818a2685ddc2014dceb2bb44427f286b553af8fa129b7b64ce8005ac68f917be7b
-
SSDEEP
12288:HxqvdYytTHNDCimvjLuxaQffdR12q6+Sw1adIRGv3axvI9XKUMLWpHV:RqVJ5i7LuxaefRSWadIRGfaxvMEWBV
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_5f1adae69a5d015194200cd1614aa23e.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2736 JaffaCakes118_5f1adae69a5d015194200cd1614aa23e.exe 2736 JaffaCakes118_5f1adae69a5d015194200cd1614aa23e.exe