22c57147988dbff199b09ad4dce8ce86334c704e40d1907a483585e88c837451

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 19:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.exe
Size 2.9MB
Sample261009-xp91sasves
SHA256 22c57147988dbff199b09ad4dce8ce86334c704e40d1907a483585e88c837451
MD5 7402b138b5be4063e1cbc101e5c4ef97
SHA1 0e851d86ea814b5cbe25c395d3c61ef221bb4cf2
SHA512 c156baf819c054743936d23ba2d34cc66ef10687e4aa08c1bfc1cc699d537b528ba2fea6dce79808b10922da00580d3191f95e2b9fb3cc00e75b0f03436ef120
SSDEEP 49152:ZV6B0d7jWQPR85DsFrkxI/22XcusOQdf433ilmT3mE3H9DRCud8BUrbwF/h0e3Kr:ZVENQpusFrkxI/22MVNdfw3ilmTWmH9p
TLSH
T196E533DCE8E0D7CAEBA285B74137E9FB54A4223444A550DF0730EE6DD5F6C20D8A261A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 7 IoCs

pid	Process
2968	jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.exe
2968	jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.exe
2968	jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.exe
2968	jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.exe
2968	jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.exe
2968	jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.exe
2968	jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.Injector.jgwu.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsbE04B.tmp\InstallOptions.dll
Size 12KB
SHA256 2338752092918db8e068d55bea61f8cdeb9be37b6e6d30a730d9703b169b08b4
MD5 57db62366ef11fdc47922a02031f0492
SHA1 6d30db5285b653025f94e74b9b045870dc0aeb7a
SHA512 d0257e02370863e07feb9346b88d87a102089f0c48aea13e069e55a14f0f6db51fb3d5f41ed5d2f39e36b612f4b6194a6b7c059709808bfb23ded89d0b0a3db5
SSDEEP 192:gzixixDOHhG9db9rd+oSVPECMlh3I8tqDynq7hwbbHF1QuCb:gOx0DOHqrdwTY6+nq72bbMum
TLSH
T105422A622384DCF3E789423AB45237136B96962679516ED1C7330FC66A2304D7EF6353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartMenu.dll

Path C:\Users\Admin\AppData\Local\Temp\nsbE04B.tmp\StartMenu.dll
Size 6KB
SHA256 95cf100fe8ce66189514002965c6274d2c9d3089fe885fb9230aae547a9e4012
MD5 7e45b2485d98ad5a44514b6df4fa4544
SHA1 bf000b012b341925aaddb546331064bd6949816c
SHA512 01fa8e8cfb85243cc7ea89ede30aad21eed56508cc39e327c847a0c6c2121c3882d5b7068a1d56bf37d576d589697a58c1de8fa168707aa25d5e3aaf0486fa0d
SSDEEP 96:JLJdRZk8OkmE+WHw0FMXF6CWhFxKpKsxQhEfP0:JLjPk8OT30FFA2CP0
TLSH
T192D1D7B6F3C184B3C64743343957BB13AB259A312325B253A66792C7BA834E7DE35312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsbE04B.tmp\System.dll
Size 10KB
SHA256 9dbe958fd425903ffc2197a112bec4fa597284f9637fe8fd5685016f32e21334
MD5 b21538d9f049d3e3e8b666744d7ca36d
SHA1 b97fc58f9aa238758a7574a2e32dac4e97392f47
SHA512 05d2c660a43519fd35daa3b4310419b33e61ce8557bde55942315ca59c3b9cb9fdeaea42c403ad78a54fa9923eaa712bcf5a10dea83619a18c4ef0c451e6d533
SSDEEP 192:ROSsJI/rqmIDNLU0dq51EgAiNbubv6xLZ:/HQQ0d01Egbq76x
TLSH
T18F225C51426442F3DD55823C08A739272F787B249EA18EC3CF9364465F299BABC7D33A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\nsbE04B.tmp\UserInfo.dll
Size 4KB
SHA256 fb4a4bea088b8dbf2adda6fdeb50be4b96bf20ba62bd9ac64b68ea628166a28d
MD5 593345196fcd1c553b0702cc026ccccd
SHA1 84446849c10e0c4d6683072f4c2eea5a085bac2f
SHA512 b28da01bec7a34a493316606c7406c06d0b278f1318563874f037caf203c2ec261c3f5c2a1790c6c177537bbb0f4dd0b7be482976f7114f70be75b5e4b311306
TLSH
T19A81EC3B43E496B3C05A473B4ACB4CC723B2E8342706512F5903489514B1E1FFE2EB2A
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsbE04B.tmp\ioSpecial.ini
Size 704B
SHA256 4684ad1318a0344279f12357f25089ab6701f5e414028fc3eecd019b2383099e
MD5 784aa8878f8946bcecc539d403e24d6e
SHA1 4ef6cc9562fad4fe159fe288c89d35f38a2d9a21
SHA512 3a2a64ec923103563032f214f0ad5fa71ab29831ca30211204456e3419379f3ba2894a3f1979fa6d08e73ec6376f624c7fff9f4885e73979ef9c79b794e040f9
TLSH
T1D901CB88942FA3690830559670F9379697D12D3C0B113DF2F0938C87678D9D38AFAED2
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads