Overview
overview
6Static
static
5jaffacakes...f6.exe
windows10-2004-x64
3jaffacakes...f6.exe
windows11-ltsc_2024-x64
3$COMMONFIL...og.dll
windows10-2004-x64
4$COMMONFIL...og.dll
windows11-ltsc_2024-x64
4$COMMONFIL...n7.dll
windows10-2004-x64
3$COMMONFIL...n7.dll
windows11-ltsc_2024-x64
3$COMMONFIL...st.exe
windows10-2004-x64
3$COMMONFIL...st.exe
windows11-ltsc_2024-x64
3$COMMONFIL...m.html
windows10-2004-x64
3$COMMONFIL...m.html
windows11-ltsc_2024-x64
3$COMMONFIL...xt.dll
windows10-2004-x64
3$COMMONFIL...xt.dll
windows11-ltsc_2024-x64
3$COMMONFIL...an.dll
windows10-2004-x64
3$COMMONFIL...an.dll
windows11-ltsc_2024-x64
3$COMMONFIL...fe.dll
windows10-2004-x64
6$COMMONFIL...fe.dll
windows11-ltsc_2024-x64
6$COMMONFIL...an.dll
windows10-2004-x64
3$COMMONFIL...an.dll
windows11-ltsc_2024-x64
3$COMMONFIL...fe.dll
windows10-2004-x64
3$COMMONFIL...fe.dll
windows11-ltsc_2024-x64
3$COMMONFIL...fa.exe
windows10-2004-x64
4$COMMONFIL...fa.exe
windows11-ltsc_2024-x64
4$COMMONFIL...rl.dll
windows10-2004-x64
3$COMMONFIL...rl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/OnTop.dll
windows10-2004-x64
3$PLUGINSDIR/OnTop.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 10:25
Behavioral task
behavioral1
Sample
jaffacakes118_9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
jaffacakes118_9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$COMMONFILES/Angels/AgLog.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$COMMONFILES/Angels/AgLog.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$COMMONFILES/Angels/Agwin7.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$COMMONFILES/Angels/Agwin7.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$COMMONFILES/Angels/AngelAsst.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$COMMONFILES/Angels/AngelAsst.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$COMMONFILES/Angels/IEHelp.htm.html
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$COMMONFILES/Angels/IEHelp.htm.html
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$COMMONFILES/Angels/IEMenuExt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$COMMONFILES/Angels/IEMenuExt.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$COMMONFILES/Angels/IEScan.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$COMMONFILES/Angels/IEScan.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
$COMMONFILES/Angels/IEsafe.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
$COMMONFILES/Angels/IEsafe.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
$COMMONFILES/Angels/Scan.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
$COMMONFILES/Angels/Scan.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
$COMMONFILES/Angels/WebSafe.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
$COMMONFILES/Angels/WebSafe.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
$COMMONFILES/Angels/go114fa.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
$COMMONFILES/Angels/go114fa.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
$COMMONFILES/Angels/xFoCtrl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
$COMMONFILES/Angels/xFoCtrl.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/OnTop.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/OnTop.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
General
- Target jaffacakes118_9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6.exe
- Size 3.6MB
- Sample260930-mf4gjaxt4n
- SHA256 9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6
- MD5 e111e24dc18e55a169cd37257cdeda39
- SHA1 529879c5ad4ace969dbf65f5c533f9b73380992d
- SHA512 3bd05675e7447265c3ddb29ae9ef723e0b366fd0b8a577900d7cb2338691460989aeac934d26a7a8ca608dea90be95969e8d9c9151f408cd6748b2d8bd1ed7a0
- SSDEEP 98304:dPPOb/H/qxF18bClQ2gvfYd1ChcpI6FTQ5vAeZhK3hLhX:hOb/H/qxF1sL3Yd5q5vAqK1
- TLSH T11E0633219592C988C842FD37C426E6B7EB1A3F48CD89154B1E3E3DB97E3CC05D4A6B58
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6.exe"1⤵
- System Location Discovery: System Language Discovery
PID:6008