Overview

overview

7

Static

static

7

jaffacakes...ic.exe

windows10-2004-x64

7

jaffacakes...ic.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/10/2026, 11:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    jaffacakes118_UDS.DangerousObject.Multi.Generic.exe
  • Size 1.4MB
  • Sample261014-nm7cfact21
  • SHA256 4a23f12884b5246888f4e99173d2c6e5f63d2360f78c7bfa7cb4c9b5916e77dc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwaredefense_evasiondiscoveryspywaretrojanvmprotect

Malware Config

Signatures

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Program crash 1 IoCs
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Modifies system certificate store 2 TTPs 2 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_UDS.DangerousObject.Multi.Generic.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_UDS.DangerousObject.Multi.Generic.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Modifies Internet Explorer settings
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2960
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2960 -s 2808
      2⤵
      • Program crash
      PID:624
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2960 -ip 2960
    1⤵
      PID:3268

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          error[1]
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GPBSYQOV\error[1]
          • Size 3KB
          • SHA256 7990e703ae060c241eba6257d963af2ecf9c6f3fbdb57264c1d48dda8171e754
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          index_fed891ef[1].css
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GPBSYQOV\index_fed891ef[1].css
          • Size 483KB
          • SHA256 ae16cc72b3baf3e8ec8cb98fc42b45746c6b429a3aaabaf1e4f6f0639bf7683b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jquery-1.10.2.min_65682a2[1].js
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GPBSYQOV\jquery-1.10.2.min_65682a2[1].js
          • Size 91KB
          • SHA256 dfe45a2b62f018ffaa1f6e280c37b14190d2719951d13e79a7b82737ad286a86
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          error[1]
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\U1Q3VPCN\error[1]
          • Size 1KB
          • SHA256 b0abe318200dcde42e2125df1f0239ae1efa648c742dbf9a5b0d3397b903c21d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          tokens_ad76f5a9[2].css
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UN11FRGI\tokens_ad76f5a9[2].css
          • Size 162KB
          • SHA256 98dac1101064b12964fada763439a23b7bf9635b9154e042acd13ec1b7691982
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cos-icon_01c45ca[2].css
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\W8OSE262\cos-icon_01c45ca[2].css
          • Size 25KB
          • SHA256 c56cf5d7899990e7f7d0da31b32545d4f9e7a95c07002136ac33923e4038a860
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cos-icon_1242807[1].eot
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\W8OSE262\cos-icon_1242807[1].eot
          • Size 109KB
          • SHA256 3f157960b9053929e5234438b5c54e70c505c75ae30062bf21af59ed6e56b204
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          iconfont_1b4ac26[1].eot
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\W8OSE262\iconfont_1b4ac26[1].eot
          • Size 43KB
          • SHA256 a1783cb2783d3b282dde49023677237b147b0df7796e0cbc80cf45eebcc1cf91
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          warning[1]
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\W8OSE262\warning[1]
          • Size 1KB
          • SHA256 5f95eff2bcaaea82d0ae34a007de3595c0d830ac4810ea4854e6526e261108e9
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          memory/2960-0-0x0000000000400000-0x0000000000734000-memory.dmp
          Download

          memory/2960-1-0x0000000000400000-0x0000000000734000-memory.dmp
          Download

          memory/2960-111-0x0000000000400000-0x0000000000734000-memory.dmp
          Download