Analysis
- max time kernel
150s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/10/2026, 02:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.exe
- Size 180KB
- Sample261014-c2gvjsvs2m
- SHA256 94aee7c9d777a05de5c703bbdd05aae5be9f3b77a18b9bac9b2123b8181e6f69
- MD5 47d931c03e07e1467e56fafb653f0451
- SHA1 5cb5af048146db2336549919865ea7363ef4fd94
- SHA512 a9c3c220dbeefe8b0412aeae7dde167ed9a83c413e7115fc0f66b978763cfad9c9ca536000125a02a87ad0a8d5693ebfb8e84082614d63e05cd47e9e12b2da1a
- SSDEEP 3072:dBqNVcuchDulWbUo2FSQ/F5wVvCLSdsn4k9RRVBXYkLAeEV6CDaV:dBqNVcuzo8SQ/FgaL9ppse0
- TLSH T1F50412B4357CD668FD234C3D3AF6FAE3335139A8A3454FA5438043306AA69173292E78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2512 4108 WerFault.exe 88 - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4108 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4108 -s 4082⤵
- Program crash
PID:2512
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 396 -p 4108 -ip 41081⤵PID:4348