Analysis
- max time kernel
149s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/10/2026, 23:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Spy.Win32.WinSpy.cwe.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Spy.Win32.WinSpy.cwe.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_Trojan-Spy.Win32.WinSpy.cwe.exe
- Size 168KB
- Sample261018-3dptcsby3y
- SHA256 d1a6b6e8f9c5ed3754a3664b19b13450b286c7b4f6e939bc9ca3e8ee54ed3188
- MD5 cd2bd4114e32f9ba30d46c4c0ecd0ffc
- SHA1 9ad3d649d2d04bfc8c2bed86576fa18a9b3edcce
- SHA512 bb666089a393d286a6a7eba0d5c4fd368cdcccbd7e88b0ce8aaba8fab964c85dc38f02535fbe018db06d223646a761a13b16bb9e03e7dd051a246c829b0cb18e
- SSDEEP 3072:ds/aAYHqLjzNJ99quKVi3gUd0n1y+9FFOIu4f0iE9HVdAClFWKTVBovyqvnVZ+We:ds9Y6zNJH1gUCn1ykFFNI9HVdAClFWKd
- TLSH T136F3C613FA40B15AD11385F05871DAAA7C167D320680AD477381BB5D2A73AE3B5F632F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan-Spy.Win32.WinSpy.cwe.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4720 jaffacakes118_Trojan-Spy.Win32.WinSpy.cwe.exe