Overview
overview
7Static
static
3JaffaCakes...ad.exe
windows7-x64
7JaffaCakes...ad.exe
windows10-2004-x64
7$PLUGINSDI...er.exe
windows7-x64
3$PLUGINSDI...er.exe
windows10-2004-x64
3$PLUGINSDI...ar.exe
windows7-x64
3$PLUGINSDI...ar.exe
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...st.exe
windows7-x64
7$PLUGINSDI...st.exe
windows10-2004-x64
7$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3AdminWorker.exe
windows7-x64
3AdminWorker.exe
windows10-2004-x64
3Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7WebInstaller.exe
windows7-x64
6WebInstaller.exe
windows10-2004-x64
6WebUpdater.exe
windows7-x64
3WebUpdater.exe
windows10-2004-x64
3content/iwa-ovr.js
windows7-x64
3content/iwa-ovr.js
windows10-2004-x64
3content/iwinarcade.js
windows7-x64
3content/iwinarcade.js
windows10-2004-x64
3firefox/iW...er.exe
windows7-x64
3firefox/iW...er.exe
windows10-2004-x64
3iWinGames.exe
windows7-x64
6iWinGames.exe
windows10-2004-x64
7iWinGamesHookIE.dll
windows7-x64
6iWinGamesHookIE.dll
windows10-2004-x64
6iWinInfo.dll
windows7-x64
3iWinInfo.dll
windows10-2004-x64
3Analysis
-
max time kernel
95s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
20/01/2025, 11:40
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_e60156f6d9a9642465da11d0915b43ad.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_e60156f6d9a9642465da11d0915b43ad.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstGameInfoHelper.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstGameInfoHelper.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/IwinToolbar.exe
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/IwinToolbar.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/iwintoolbarinst.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/iwintoolbarinst.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
AdminWorker.exe
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
AdminWorker.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Uninstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Uninstall.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
WebInstaller.exe
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
WebInstaller.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
WebUpdater.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
WebUpdater.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
content/iwa-ovr.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
content/iwa-ovr.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
content/iwinarcade.js
Resource
win7-20241023-en
Behavioral task
behavioral24
Sample
content/iwinarcade.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
firefox/iWinArcadeLauncher.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
firefox/iWinArcadeLauncher.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
iWinGames.exe
Resource
win7-20241010-en
Behavioral task
behavioral28
Sample
iWinGames.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
iWinGamesHookIE.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
iWinGamesHookIE.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
iWinInfo.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
iWinInfo.dll
Resource
win10v2004-20241007-en
General
-
Target
$PLUGINSDIR/InstGameInfoHelper.exe
-
Size
98KB
-
MD5
ec08c1c867ded8f5221aefb969b161c1
-
SHA1
839866cc28b401d1d3f0f07aa8f13803f56b496a
-
SHA256
f3bd166834e626631abe30c2353dd1c015d8b9cf6b63cf94164478e6cbf3c0be
-
SHA512
34c35aab50e9207bdb50cb619c0882b585577b46cdd23710663dcfeceaca8b7c4248e082ad28c2718201225c42d0ad559ebd0ebe904a588d324d50d44774a7a7
-
SSDEEP
1536:DCeRALYkcf6IZQDHnvfr67+MC1s5gxA/yCAPkWyi5N0QNt8aW+:2hYkcyI8r0D+lPkWyi5N05E
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language InstGameInfoHelper.exe