Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19-04-2024 07:07
Behavioral task
behavioral1
Sample
f9c597c97d77f09e97c9da1ec95d0391_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9c597c97d77f09e97c9da1ec95d0391_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9c597c97d77f09e97c9da1ec95d0391_JaffaCakes118.exe
-
Size
260KB
-
MD5
f9c597c97d77f09e97c9da1ec95d0391
-
SHA1
082a444af84db2feaf8cf30e128cce1da035ba4e
-
SHA256
5c31c87e2cd36382e4dce5559a1f79d9b96d2f952e7ceef69daa6907f1d9ac05
-
SHA512
faeb1b275109a305aea53618cfa5441c95d11fceb5e44395434868c6d3d4b593c5a6fe96eab43d4e57f69822834c02f24ec789e63b3befde0007c18518b09650
-
SSDEEP
6144:uLr5atHtCAIdgVPFPVsRoDr4RshX6AL0dDUSC+u2mMp+h:W5atTLP12R7itgdu+u2mMp+h
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/2220-0-0x0000000000400000-0x0000000000497000-memory.dmp upx behavioral1/memory/2220-1-0x0000000000400000-0x0000000000497000-memory.dmp upx behavioral1/memory/2220-2-0x0000000000400000-0x0000000000497000-memory.dmp upx -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
Processes:
f9c597c97d77f09e97c9da1ec95d0391_JaffaCakes118.exedescription ioc process File opened for modification \??\PhysicalDrive0 f9c597c97d77f09e97c9da1ec95d0391_JaffaCakes118.exe