General
-
Target
fb647e8912ef19cd649843b18e525e52_JaffaCakes118
-
Size
188KB
-
Sample
240419-3anrwsba5v
-
MD5
fb647e8912ef19cd649843b18e525e52
-
SHA1
c990defba3f3335efc7a9a779e3ffa20f27ff682
-
SHA256
3b03b0704d4d68080bbf003aa8130fea742916ca4eb1f0d2c5c6a797b940670b
-
SHA512
4cdce476a2b0cb3284a5d8d2d164f777d91a9a81e33c7ba2dd318a7cdb939b92484fef31fb60b6bffe417287c90e6b62c5e691bb37bf1a0763be03574a3f06f4
-
SSDEEP
3072:FU7nhXFN/wA7BkBouB/lsYOtvt3HEbdavHviikClD8R2FCCyTN1slZRv+:MvN/fCBou8xHQdavvyyD8R2FCC4URv+
Static task
static1
Behavioral task
behavioral1
Sample
fb647e8912ef19cd649843b18e525e52_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fb647e8912ef19cd649843b18e525e52_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
fb647e8912ef19cd649843b18e525e52_JaffaCakes118
-
Size
188KB
-
MD5
fb647e8912ef19cd649843b18e525e52
-
SHA1
c990defba3f3335efc7a9a779e3ffa20f27ff682
-
SHA256
3b03b0704d4d68080bbf003aa8130fea742916ca4eb1f0d2c5c6a797b940670b
-
SHA512
4cdce476a2b0cb3284a5d8d2d164f777d91a9a81e33c7ba2dd318a7cdb939b92484fef31fb60b6bffe417287c90e6b62c5e691bb37bf1a0763be03574a3f06f4
-
SSDEEP
3072:FU7nhXFN/wA7BkBouB/lsYOtvt3HEbdavHviikClD8R2FCCyTN1slZRv+:MvN/fCBou8xHQdavvyyD8R2FCC4URv+
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-