Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/10/2026, 02:17
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.exe
- Size 517KB
- Sample261014-cq142seb53
- SHA256 0714640f1a37873f4e162aa9818c02d7c8078767fb7617b49b77c6264301b93e
- MD5 3ffd197d3a5187dff0aa1f9c88817ef1
- SHA1 a5baa19c9508fa2da607bc6ec8f944b2b5c8005f
- SHA512 9459fdb4c1cef769ed256d3141109e291f36a75115b119bf40f048d452e747ed4af6fd77126e085051187a7f8a73ac36b5a439d19e1f8a4bcc0469bcb665ab57
- SSDEEP 12288:dlu9DqMm15iBTp72yzHFIr7rcDkVxSLCQHM1:wa15iB52yxlDkVcs1
- TLSH T10DB401C47585D892C56A7CF09CAB99301AB56D8B6321CF0639B6771A4D323C3DD8BE0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 3468 wrote to memory of 2220 3468 jaffacakes118_HEUR.Trojan.Win32.Generic.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:3468 -
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exedw20.exe -x -s 8602⤵PID:2220
-