Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/10/2026, 12:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_UDS.DangerousObject.Multi.Generic.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_UDS.DangerousObject.Multi.Generic.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_UDS.DangerousObject.Multi.Generic.exe
- Size 130KB
- Sample261014-n6c8pscv2j
- SHA256 2c0a1da58830ef5fbac05f0e778132878eb8e186278caccd90d9416532e3cea2
- MD5 d434cfc73c7b89e6856c8eed072133e0
- SHA1 2e56c4b449e891a8823e328b33f339c196978187
- SHA512 3b67db22cc9d9ef4381f8d92b173791168e8c8e614e850c0f05fdee43ca012577681e0beddfe6138eaaf690bb3dbb3a140982859a158e88e966aacee19d161f6
- SSDEEP 3072:7DZNVkjjzn2ntLOT6c8FOnmUtv0TUyYSeVBZ99yY7yBhLP:JNejjzn2HynZt84QenT9Mz
- TLSH T163D3E18B74B8EA37D86F27784832760047B7D64C1B67C3063BACFD242F5E525A64A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2240 5908 WerFault.exe 88 - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_UDS.DangerousObject.Multi.Generic.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_UDS.DangerousObject.Multi.Generic.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_UDS.DangerousObject.Multi.Generic.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5908 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5908 -s 5162⤵
- Program crash
PID:2240
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 5908 -ip 59081⤵PID:2556