Analysis
-
max time kernel
105s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20250410-en -
resource tags
arch:x64arch:x86image:win10v2004-20250410-enlocale:en-usos:windows10-2004-x64system -
submitted
12/04/2025, 23:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
JaffaCakes118_b2f625f9432181a9ec45632f24d441a5.exe
Resource
win10v2004-20250410-en
2 signatures
150 seconds
General
-
Target
JaffaCakes118_b2f625f9432181a9ec45632f24d441a5.exe
-
Size
100KB
-
MD5
b2f625f9432181a9ec45632f24d441a5
-
SHA1
e751b9443b0298e728948d18beb51a499325a334
-
SHA256
f9fc8b20517f17be7fdd7642ce69e0f80ce73b94ca59863d51478a48be9e8312
-
SHA512
e028a07827a47d4af6502f6f5159323d2eec40d89f5d66a6f47336e8299a7df5e16196e5a400d11e3a6fda85a9697d56192db815bf703692fb3f3347d018cda2
-
SSDEEP
768:YwG7v+pycu5vq0PZQIZdgoLUCHUZGkYgibiBXt6FJ9bb8x1A3znHWLxoCzhQz5Zb:Yz74yXi8pVWYFJ9bbICjWLxT6uLNz3i
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_b2f625f9432181a9ec45632f24d441a5.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 5644 JaffaCakes118_b2f625f9432181a9ec45632f24d441a5.exe 5644 JaffaCakes118_b2f625f9432181a9ec45632f24d441a5.exe 5644 JaffaCakes118_b2f625f9432181a9ec45632f24d441a5.exe