Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/10/2026, 22:29
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.exe
- Size 549KB
- Sample261013-2ebsfsvsdv
- SHA256 55ef1be8c7507ec7b321d62777777f634a1b5b0a82c562c010c4d402aa918bf6
- MD5 0da13b97e948f7d02d974331beef21c1
- SHA1 5d4b2c741dd20f49219c12ccd7b09cc066003d31
- SHA512 71aa9eca48dbb1f71fe06702a5a14b9f191e7f6b9bdec1e38575248abf1664993a0754eab7580ca6926208bb389cb81efe8262ebf93689c9eb13bfa3dc119f8b
- SSDEEP 6144:1K/1lRkOKIAy/WKmgizZbabRWQABqs8D9A/X7Q8Ip3LGHKtZuWAApup/s61bwPmO:1sXW7pa7AItDALmLGqt5+061bweMtqy
- TLSH T114C4F129B3C54FA2CF4F5B79E8816A549B3681565B99EB4F08840CDC2D363EBC08B5C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Drops desktop.ini file(s) 2 IoCs
description ioc Process File created C:\Windows\assembly\Desktop.ini jaffacakes118_HEUR.Trojan.Win32.Generic.exe File opened for modification C:\Windows\assembly\Desktop.ini jaffacakes118_HEUR.Trojan.Win32.Generic.exe - Drops file in Windows directory 3 IoCs
description ioc Process File opened for modification C:\Windows\assembly jaffacakes118_HEUR.Trojan.Win32.Generic.exe File created C:\Windows\assembly\Desktop.ini jaffacakes118_HEUR.Trojan.Win32.Generic.exe File opened for modification C:\Windows\assembly\Desktop.ini jaffacakes118_HEUR.Trojan.Win32.Generic.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_HEUR.Trojan.Win32.Generic.exe - Suspicious use of AdjustPrivilegeToken 9 IoCs
description pid Process Token: SeDebugPrivilege 3328 jaffacakes118_HEUR.Trojan.Win32.Generic.exe Token: 33 3328 jaffacakes118_HEUR.Trojan.Win32.Generic.exe Token: SeIncBasePriorityPrivilege 3328 jaffacakes118_HEUR.Trojan.Win32.Generic.exe Token: 33 3328 jaffacakes118_HEUR.Trojan.Win32.Generic.exe Token: SeIncBasePriorityPrivilege 3328 jaffacakes118_HEUR.Trojan.Win32.Generic.exe Token: 33 3328 jaffacakes118_HEUR.Trojan.Win32.Generic.exe Token: SeIncBasePriorityPrivilege 3328 jaffacakes118_HEUR.Trojan.Win32.Generic.exe Token: 33 3328 jaffacakes118_HEUR.Trojan.Win32.Generic.exe Token: SeIncBasePriorityPrivilege 3328 jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"1⤵
- Drops desktop.ini file(s)
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:3328