Analysis
- max time kernel
149s - max time network
127s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/10/2026, 03:17
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.exe
- Size 112KB
- Sample261014-dthbsaey91
- SHA256 97fd71f1a280f4001a91af5fc2c545b37075f75b7b33101d63bfca655852cebf
- MD5 528e57665a2be1e987e7d4f9aadf3f25
- SHA1 03c710c0bff788f1d8565f03807c03b0e43a4bd5
- SHA512 5ee9a29d0f5ec0ac60367ea6b91102ee61f5441e4fe3650cf046b60334e8448c679054975cae2a8cb618784f933129d6510f3a9256de0da14215b10d8ab9946b
- SSDEEP 3072:v+w8uSMuB1L73Plkzgi75HJKfVHOmfPwtQsf1GJB:vV8uSMu/Hfvi1HJXmfPwtQuGf
- TLSH T1C1B3028336682EF6CCC79E3489AD9B4FFD1065C9CE19C67BC3885A12F66341433982E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/5096-0-0x0000000000400000-0x0000000000417000-memory.dmp vmprotect behavioral1/memory/5096-1-0x0000000000400000-0x0000000000417000-memory.dmp vmprotect behavioral1/memory/5096-2-0x0000000000400000-0x0000000000417000-memory.dmp vmprotect - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_HEUR.Trojan.Win32.Generic.exe