Analysis
-
max time kernel
139s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
19-07-2024 07:30
Behavioral task
behavioral1
Sample
5afb6740acc40133c0afe97ada9130b2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5afb6740acc40133c0afe97ada9130b2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5afb6740acc40133c0afe97ada9130b2_JaffaCakes118.exe
-
Size
303KB
-
MD5
5afb6740acc40133c0afe97ada9130b2
-
SHA1
94ae6020bc0d8c450149d43fc4e132dd1d9d7ede
-
SHA256
38ed1263de9aef591f761e770fa45347f631aa3b6fc371acd8a05f12a1c20863
-
SHA512
4fc5c7b52a80abdceb71c5a45b6ccddba0a5ad2a5a13590da7c47c5591e85304b9061220dedfa500db03b87b6c232e23c0c761207048233ea242536b4048a939
-
SSDEEP
6144:jvOBo+b95SQg9T4Cn+jjEJM+yAZeHfCbGYCaKIffD7dCsPOW21dqB:m7kQg9chj4JM0Ze/CRCaK0tPOD+B
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3168-0-0x0000000000400000-0x00000000004B6000-memory.dmp upx behavioral2/memory/3168-1-0x0000000000400000-0x00000000004B6000-memory.dmp upx -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 5afb6740acc40133c0afe97ada9130b2_JaffaCakes118.exe