Overview
overview
7Static
static
3jaffacakes...wu.exe
windows10-2004-x64
7jaffacakes...wu.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3Slots.dll
windows10-2004-x64
1Slots.dll
windows11-ltsc_2024-x64
1Slots.exe
windows10-2004-x64
3Slots.exe
windows11-ltsc_2024-x64
3Uninstall.exe
windows10-2004-x64
7Uninstall.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3aminstall.dll
windows10-2004-x64
3aminstall.dll
windows11-ltsc_2024-x64
3General
- Target jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.7402b138b5be4063e1cbc101e5c4ef97
- Size 2.9MB
- Sample261009-xp91sasves
- SHA256 22c57147988dbff199b09ad4dce8ce86334c704e40d1907a483585e88c837451
- MD5 7402b138b5be4063e1cbc101e5c4ef97
- SHA1 0e851d86ea814b5cbe25c395d3c61ef221bb4cf2
- SHA512 c156baf819c054743936d23ba2d34cc66ef10687e4aa08c1bfc1cc699d537b528ba2fea6dce79808b10922da00580d3191f95e2b9fb3cc00e75b0f03436ef120
- SSDEEP 49152:ZV6B0d7jWQPR85DsFrkxI/22XcusOQdf433ilmT3mE3H9DRCud8BUrbwF/h0e3Kr:ZVENQpusFrkxI/22MVNdfw3ilmTWmH9p
- TLSH T196E533DCE8E0D7CAEBA285B74137E9FB54A4223444A550DF0730EE6DD5F6C20D8A261A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Dialer.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Dialer.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/GameuxInstallHelper.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/GameuxInstallHelper.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
Slots.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
Slots.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
Slots.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
Slots.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
Uninstall.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
Uninstall.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
aminstall.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
aminstall.dll
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.7402b138b5be4063e1cbc101e5c4ef97
- Size 2.9MB
- SHA256 22c57147988dbff199b09ad4dce8ce86334c704e40d1907a483585e88c837451
- MD5 7402b138b5be4063e1cbc101e5c4ef97
- SHA1 0e851d86ea814b5cbe25c395d3c61ef221bb4cf2
- SHA512 c156baf819c054743936d23ba2d34cc66ef10687e4aa08c1bfc1cc699d537b528ba2fea6dce79808b10922da00580d3191f95e2b9fb3cc00e75b0f03436ef120
- SSDEEP 49152:ZV6B0d7jWQPR85DsFrkxI/22XcusOQdf433ilmT3mE3H9DRCud8BUrbwF/h0e3Kr:ZVENQpusFrkxI/22MVNdfw3ilmTWmH9p
- TLSH T196E533DCE8E0D7CAEBA285B74137E9FB54A4223444A550DF0730EE6DD5F6C20D8A261A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/Dialer.dll
- Size 3KB
- SHA256 39b9f9e1ff6c4f4ea9739cad159448b6bf5f570b09b839d5f43f2abd79c16771
- MD5 de4b7820e03027762f0255059dccef1b
- SHA1 b5545c72537fe89d4db4286a8448db62edc56c2b
- SHA512 9152538cf1ea8c9f1a6b082f4cacb97cb05be915ff608125d4c705a8611a1e9368930e5284c820ff0f1106075a65e14d45052de6a75d7878ad5f75111d134455
- TLSH T1BC7112235A6845F5E503137F6887655E60F7A85103A3C50C99CC57207E632D0FD77B11
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/GameuxInstallHelper.dll
- Size 73KB
- SHA256 9ce7213567d8310e69c82f88586fcd38b5dd26a21c851b5d6f9c73bf46ff1429
- MD5 b225e2a7fa0c597b68cd7b06bfcd7fa2
- SHA1 fd3df3532c38b8fc750248a91839f8653498084f
- SHA512 0c14370373472113a57804097490acc6c490bf3db1c4a41dc0421dcfbdc79156397e6eaf60fd33e12809bbd4e8b87538546a7d5373eeeaa8573a8a871c5d7f32
- SSDEEP 1536:IOY/mBRLy0VN5sFAjNsLKapmxQZfjCGOOc1ztWhiFhsHaevt:IOY/30r5sFAJsjkr1ztWsFnEt
- TLSH T1FB734B6176D05031E4E39A7806ECA260693F78721B71D8CBE7046ADE9E337D1B63871B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/InstallOptions.dll
- Size 12KB
- SHA256 2338752092918db8e068d55bea61f8cdeb9be37b6e6d30a730d9703b169b08b4
- MD5 57db62366ef11fdc47922a02031f0492
- SHA1 6d30db5285b653025f94e74b9b045870dc0aeb7a
- SHA512 d0257e02370863e07feb9346b88d87a102089f0c48aea13e069e55a14f0f6db51fb3d5f41ed5d2f39e36b612f4b6194a6b7c059709808bfb23ded89d0b0a3db5
- SSDEEP 192:gzixixDOHhG9db9rd+oSVPECMlh3I8tqDynq7hwbbHF1QuCb:gOx0DOHqrdwTY6+nq72bbMum
- TLSH T105422A622384DCF3E789423AB45237136B96962679516ED1C7330FC66A2304D7EF6353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 9a2d4add45790a47d56aa67b9199b66119ec0a21185f3df6fabbc56a9b47cb88
- MD5 51d66dbc791228d8411159379523d971
- SHA1 029981130567cd45cb98cff5041acbec13d6ba3f
- SHA512 c224b16c27869767f7fe403094797bc580b4710c92f05f7fad5fc405e834bd12b2c5022fa6e380ad7e2f58650115afe8792ce8bfba932c4fb46e8d27d99ccc7d
- SSDEEP 48:SHEnz1tBa/XC1TQO50vwovgxVLrh2TpXHW+iJ/L9Cp+0rf1uapRkdfhhdJcN:H9UXC13C/ovLrh2cD/L9NochjcN
- TLSH T1DFB1867163C005B2E281067B9193679339A3D5343365D10F8B33625A6885DB7DC3DB83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/NSISdl.dll
- Size 12KB
- SHA256 a0de27810988abaa75ef1a3b8035a56f6632ee9bd9412918dda608dfe1ad6e4d
- MD5 e32c7911814ae37f75ad9340fce9f46c
- SHA1 a24483c292fc1a89fe34962cc6fb685d16b42e97
- SHA512 1201782253eadba8381d660e9e67bf2c74fee92955802e569d8172613d4ef8524985b3a747bb17d0ff256c2ca43e329d1414eacf3491092f4d12efd5b53927e2
- SSDEEP 192:BTed/9E1XMNUrW7VymsS9W+7HaQM7zFSnQXiCVIXuZsav+zPzrR2RMi:BTqE2UrW9tWeaQ6zF1NIXu6a2DP8Ki
- TLSH T127423A169E1018F3C392103971AF2BBAABB3453309444D83CB335A59AF667637E36787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 6KB
- SHA256 95cf100fe8ce66189514002965c6274d2c9d3089fe885fb9230aae547a9e4012
- MD5 7e45b2485d98ad5a44514b6df4fa4544
- SHA1 bf000b012b341925aaddb546331064bd6949816c
- SHA512 01fa8e8cfb85243cc7ea89ede30aad21eed56508cc39e327c847a0c6c2121c3882d5b7068a1d56bf37d576d589697a58c1de8fa168707aa25d5e3aaf0486fa0d
- SSDEEP 96:JLJdRZk8OkmE+WHw0FMXF6CWhFxKpKsxQhEfP0:JLjPk8OT30FFA2CP0
- TLSH T192D1D7B6F3C184B3C64743343957BB13AB259A312325B253A66792C7BA834E7DE35312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 9dbe958fd425903ffc2197a112bec4fa597284f9637fe8fd5685016f32e21334
- MD5 b21538d9f049d3e3e8b666744d7ca36d
- SHA1 b97fc58f9aa238758a7574a2e32dac4e97392f47
- SHA512 05d2c660a43519fd35daa3b4310419b33e61ce8557bde55942315ca59c3b9cb9fdeaea42c403ad78a54fa9923eaa712bcf5a10dea83619a18c4ef0c451e6d533
- SSDEEP 192:ROSsJI/rqmIDNLU0dq51EgAiNbubv6xLZ:/HQQ0d01Egbq76x
- TLSH T18F225C51426442F3DD55823C08A739272F787B249EA18EC3CF9364465F299BABC7D33A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 fb4a4bea088b8dbf2adda6fdeb50be4b96bf20ba62bd9ac64b68ea628166a28d
- MD5 593345196fcd1c553b0702cc026ccccd
- SHA1 84446849c10e0c4d6683072f4c2eea5a085bac2f
- SHA512 b28da01bec7a34a493316606c7406c06d0b278f1318563874f037caf203c2ec261c3f5c2a1790c6c177537bbb0f4dd0b7be482976f7114f70be75b5e4b311306
- TLSH T19A81EC3B43E496B3C05A473B4ACB4CC723B2E8342706512F5903489514B1E1FFE2EB2A
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Slots.dll
- Size 924KB
- SHA256 b7096a858523dc92446be4c376df6022942a7089f95af45a7575fc40f6f618a1
- MD5 66b5147de8b659f8cc57becd0c8acf56
- SHA1 2069bbce423b8988b0f9f91fd544a8341cb19c5f
- SHA512 8fb7e3cd5b0708146a401661aeb6927fae00151785cc7c3130955be2b911fb8a3e5cde05222e5f249437c530c06cd908fcc08ea2131ceada0778c4418b689f1a
- SSDEEP 12288:3uroi4lUhPR13V6JnC87CrMJen/7/6R/JlnhY9iSss99Ip9+emuG:3uqeR1lmnbyMg/7iY6KIvc
- TLSH T10D152326D7570B62ECBB47302C5BC6837E09FE0DACA36A3F024F645AF502426AD17365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Slots.exe
- Size 1.9MB
- SHA256 7f03be071c3902c9e3e01cc0cb63b974c9ba15adbd40ef36dd746fa2ec8d17f9
- MD5 d817da14c66923fdbbfa194f4eb9b08a
- SHA1 9e283d6c078b998e6892479e0080e6b8630fb5ad
- SHA512 45eeff02c848fd2d9e354b21eac7eaea85ac52366a3a48a8d8829cc2bae891f46158e16fd9b66e903bbaf9bb57ae81b68611704f13efb50cc9a09cab3fb52a92
- SSDEEP 49152:jMsIDTVxKvrBvxuSSLsZNgWlksuvr27ikf0a:eTTS1TeGMa
- TLSH T16195237DDB8A1B08D949C236CB161F0A1678C60D45A7C7FAF03CD5D5249FB83EA02E28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Uninstall.exe
- Size 133KB
- SHA256 963902b9288444249654488fe2fdf24cae5c641d66a37700fb0180d0e0e901e0
- MD5 33d20cdb4050e28f16064b22d256d398
- SHA1 624206581569cc026991c4626bcf8859c6d95e31
- SHA512 510a8a8f237a8f7d62d1593792fa6f37f5182469000985fe93bfc8e0f88c75e153b214832332f072d18af42b8a864297714c234d49f3480391d1cab1b9204def
- SSDEEP 3072:zk5+bFdkJqzoCICVJAdbRvCQX8Irzm3CReyzKxi:s0RzoCIygbuUy3CQLi
- TLSH T190D3012635D6DFB6C11345B0043BB6BBE3B1EF111115224F5B706FADAB36882D91A2CB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 12KB
- SHA256 2338752092918db8e068d55bea61f8cdeb9be37b6e6d30a730d9703b169b08b4
- MD5 57db62366ef11fdc47922a02031f0492
- SHA1 6d30db5285b653025f94e74b9b045870dc0aeb7a
- SHA512 d0257e02370863e07feb9346b88d87a102089f0c48aea13e069e55a14f0f6db51fb3d5f41ed5d2f39e36b612f4b6194a6b7c059709808bfb23ded89d0b0a3db5
- SSDEEP 192:gzixixDOHhG9db9rd+oSVPECMlh3I8tqDynq7hwbbHF1QuCb:gOx0DOHqrdwTY6+nq72bbMum
- TLSH T105422A622384DCF3E789423AB45237136B96962679516ED1C7330FC66A2304D7EF6353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 fb4a4bea088b8dbf2adda6fdeb50be4b96bf20ba62bd9ac64b68ea628166a28d
- MD5 593345196fcd1c553b0702cc026ccccd
- SHA1 84446849c10e0c4d6683072f4c2eea5a085bac2f
- SHA512 b28da01bec7a34a493316606c7406c06d0b278f1318563874f037caf203c2ec261c3f5c2a1790c6c177537bbb0f4dd0b7be482976f7114f70be75b5e4b311306
- TLSH T19A81EC3B43E496B3C05A473B4ACB4CC723B2E8342706512F5903489514B1E1FFE2EB2A
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target aminstall.dll
- Size 157KB
- SHA256 2a7ee893990dc65bdd4865e0ff3295fe331c82981a5cc40751c8fdfe90d1190b
- MD5 cec88cfc2853cf5490d23af767f3aae4
- SHA1 642b38211d1c18def13b9d6b76b622f7b36779a2
- SHA512 9dc4ed2fcbdf1f01f0a873a7607a705d80f8621b08aa18ef56ea8b8b5cce29c304507bed6096a28bfdde4a15dd76a57ffcdd20b175157682add98d05db354b52
- SSDEEP 3072:8oy/SJZ1bsvb7EX3jUzrK9TBffJqteZDXwtep6+:8aosXmK9TBZFK
- TLSH T183F39E1131D0C8B2E579017E48D2C729DB67B5F09AB58AC73FD81B896E36291DB363C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10