Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
12/07/2024, 14:51
General
-
Target
3dd2729fb1d751c9513f6d51ae794456_JaffaCakes118.exe
-
Size
724KB
-
MD5
3dd2729fb1d751c9513f6d51ae794456
-
SHA1
3d09aed97644e6e8dd700c3156148ec2c62e89ca
-
SHA256
3848a38a574525c17e03a731ff90a560ab7196cfce06476ea5940c475116c2ac
-
SHA512
81d1da54f40cf887b6d769911f5d38c0d3a6cab498c9172273f49c1fdcb3d6b53f602e7020752123556c6339b62906790d282836e43df1b62e443944c5f95eb3
-
SSDEEP
12288:VMmjxYbV4DhVau84Isc3/tiIW+vX92Cp3x69FnkTnOZXje+IT1R8:lVHIsc3kl+vX92CSPnkTnOZX1ITT8
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3dd2729fb1d751c9513f6d51ae794456_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3dd2729fb1d751c9513f6d51ae794456_JaffaCakes118.exe"1⤵
- Checks BIOS information in registry
- Writes to the Master Boot Record (MBR)
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx