Analysis
- max time kernel
149s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/10/2026, 00:50
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.exe
- Size 1.2MB
- Sample261014-a7c3faev2m
- SHA256 927e239f380e37cce3f11200f1ce9be879e39711c0437079e5566ce399b4c226
- MD5 2cdd8f7c4fcb6db02eb709cf29cfc8be
- SHA1 5bc03c6bb005bccee3d9abc2b0eed36a094d6fa2
- SHA512 3f1448d14b9912336cf84ac9d224499c61236b777d5c13e990d03c47527c67804d11b5a730c1c62a82cc18372d6cb5fbc6b9583caa746a3eb6d09c7e3a921b71
- SSDEEP 24576:xhm/8CsjIGdx1eh3xEpDCmV2XGtcPMsMUPvNmCYKyTPThA3NP:xwkRddi3djPMsPV5YKWVA
- TLSH T1A6553320154BF4EDCD7AC93A76632F0EB9366A4D2964C29D43D0F44F6C7B8A5101B2F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/728-0-0x0000000000400000-0x000000000072A000-memory.dmp upx behavioral1/memory/728-2-0x0000000000400000-0x000000000072A000-memory.dmp upx behavioral1/memory/728-5-0x0000000000400000-0x000000000072A000-memory.dmp upx behavioral1/memory/728-6-0x0000000000400000-0x000000000072A000-memory.dmp upx behavioral1/memory/728-7-0x0000000000400000-0x000000000072A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_HEUR.Trojan.Win32.Generic.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 728 jaffacakes118_HEUR.Trojan.Win32.Generic.exe 728 jaffacakes118_HEUR.Trojan.Win32.Generic.exe 728 jaffacakes118_HEUR.Trojan.Win32.Generic.exe