Analysis
- max time kernel
148s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/10/2026, 23:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.dll
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.dll
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.dll
- Size 55KB
- Sample261013-24btradv2l
- SHA256 e565f8a933bdc91b60aa2a931c6f33d0bee0f53d2421b7e607bf481b912412b8
- MD5 15bc6f6622792b37fcde0da3081385d1
- SHA1 3122780805772c4ee55599af4bac51bc17fe017e
- SHA512 9200eb96e32d6e6f096bbe28a8757b3a0fd061e05ab282f9bbf931972388586d20f909c8cbe62f8495431a8062b75671e2a20de4659b712560268f25257d7dad
- SSDEEP 768:daUeOCYq8/KfC5efalsxKEpqKYF/hu+8D3klhv+92veLRmQ6:IuCN4Ka5efaSxKEwKAJud0b+9LR8
- TLSH T17643BFA330B1D6E3CB40CBF8265A172AEB6FE6B98658D717364133E37410051AD8A7C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 5592 wrote to memory of 2300 5592 rundll32.exe 88
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:5592 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.dll,#12⤵
- System Location Discovery: System Language Discovery
PID:2300
-