Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    16/03/2025, 16:15

General

  • Target

    JaffaCakes118_7ae3337102c34d780de4009ebdc10e52.exe

  • Size

    413KB

  • MD5

    7ae3337102c34d780de4009ebdc10e52

  • SHA1

    daddaca22bc3757349a12ce49bd70ecd708cb887

  • SHA256

    963c073e0c57dc6de84f0a300e347fd464024bab0f75406cd4fc4b2635ad05b9

  • SHA512

    a86bb8319cb252a3cb2f91c67cae5c4be147f0b8906e1fd653f8769ad65aadc24e1b372d76833b509412fa37b04e79f45328746d8659c9a850fb9cb3dc6b4125

  • SSDEEP

    12288:6lrURJ2hdLvl7zYHxp1cisEvc7ZieUL0fvh0i:QmJ2fLm9sYc7wfL0N

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7ae3337102c34d780de4009ebdc10e52.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7ae3337102c34d780de4009ebdc10e52.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1124

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1124-0-0x0000000000400000-0x000000000040C000-memory.dmp

    Filesize

    48KB

  • memory/1124-23-0x0000000000570000-0x0000000000580000-memory.dmp

    Filesize

    64KB

  • memory/1124-22-0x0000000000560000-0x0000000000570000-memory.dmp

    Filesize

    64KB

  • memory/1124-21-0x0000000000540000-0x0000000000550000-memory.dmp

    Filesize

    64KB

  • memory/1124-20-0x0000000000530000-0x0000000000540000-memory.dmp

    Filesize

    64KB

  • memory/1124-19-0x00000000004E0000-0x00000000004F0000-memory.dmp

    Filesize

    64KB

  • memory/1124-18-0x00000000004D0000-0x00000000004E0000-memory.dmp

    Filesize

    64KB

  • memory/1124-17-0x00000000004C0000-0x00000000004D0000-memory.dmp

    Filesize

    64KB

  • memory/1124-16-0x00000000004B0000-0x00000000004C0000-memory.dmp

    Filesize

    64KB

  • memory/1124-15-0x00000000004A0000-0x00000000004B0000-memory.dmp

    Filesize

    64KB

  • memory/1124-14-0x0000000000490000-0x00000000004A0000-memory.dmp

    Filesize

    64KB

  • memory/1124-13-0x0000000000480000-0x0000000000490000-memory.dmp

    Filesize

    64KB

  • memory/1124-12-0x00000000003E0000-0x00000000003F0000-memory.dmp

    Filesize

    64KB

  • memory/1124-11-0x00000000003D0000-0x00000000003E0000-memory.dmp

    Filesize

    64KB

  • memory/1124-10-0x00000000003C0000-0x00000000003D0000-memory.dmp

    Filesize

    64KB

  • memory/1124-9-0x00000000003B0000-0x00000000003C0000-memory.dmp

    Filesize

    64KB

  • memory/1124-8-0x00000000002A0000-0x00000000002B0000-memory.dmp

    Filesize

    64KB

  • memory/1124-7-0x0000000000290000-0x00000000002A0000-memory.dmp

    Filesize

    64KB

  • memory/1124-6-0x0000000000280000-0x0000000000290000-memory.dmp

    Filesize

    64KB

  • memory/1124-5-0x0000000000270000-0x0000000000280000-memory.dmp

    Filesize

    64KB

  • memory/1124-4-0x00000000001E0000-0x00000000001F0000-memory.dmp

    Filesize

    64KB

  • memory/1124-3-0x00000000001D0000-0x00000000001E0000-memory.dmp

    Filesize

    64KB

  • memory/1124-2-0x00000000001C0000-0x00000000001D0000-memory.dmp

    Filesize

    64KB

  • memory/1124-1-0x00000000001B0000-0x00000000001C0000-memory.dmp

    Filesize

    64KB

  • memory/1124-24-0x0000000000580000-0x0000000000590000-memory.dmp

    Filesize

    64KB

  • memory/1124-25-0x0000000000590000-0x00000000005A0000-memory.dmp

    Filesize

    64KB

  • memory/1124-26-0x00000000005A0000-0x00000000005B0000-memory.dmp

    Filesize

    64KB

  • memory/1124-27-0x00000000005B0000-0x00000000005C0000-memory.dmp

    Filesize

    64KB

  • memory/1124-28-0x00000000005C0000-0x00000000005D0000-memory.dmp

    Filesize

    64KB

  • memory/1124-29-0x00000000005D0000-0x00000000005E0000-memory.dmp

    Filesize

    64KB

  • memory/1124-30-0x00000000005E0000-0x00000000005F0000-memory.dmp

    Filesize

    64KB

  • memory/1124-31-0x00000000005F0000-0x0000000000600000-memory.dmp

    Filesize

    64KB

  • memory/1124-32-0x00000000024E0000-0x00000000024F0000-memory.dmp

    Filesize

    64KB

  • memory/1124-33-0x00000000024F0000-0x0000000002500000-memory.dmp

    Filesize

    64KB

  • memory/1124-34-0x0000000002500000-0x0000000002510000-memory.dmp

    Filesize

    64KB

  • memory/1124-35-0x0000000002510000-0x0000000002520000-memory.dmp

    Filesize

    64KB

  • memory/1124-36-0x0000000002520000-0x0000000002530000-memory.dmp

    Filesize

    64KB

  • memory/1124-37-0x0000000002520000-0x0000000002530000-memory.dmp

    Filesize

    64KB

  • memory/1124-39-0x0000000000400000-0x000000000040C000-memory.dmp

    Filesize

    48KB