General
-
Target
fa18e4d1a3ae132c6f8432066fa128ef_JaffaCakes118
-
Size
120KB
-
Sample
240419-mfq67sga62
-
MD5
fa18e4d1a3ae132c6f8432066fa128ef
-
SHA1
9f1f14063d63ccb86580064068cec5d99f22c5c5
-
SHA256
ac05b0508c570c1766766a1c6ddf903d3ac4059158f46ce1977a26d56d44c2fc
-
SHA512
bd90d23415ac7e5305491d17355e4bac4a35baf325c7e7dc9c099fddf362c28c2786a69c1c7954567cf995ba13237c0bb41ceaae6c56e25c86e5808e70f0300a
-
SSDEEP
3072:Ik1s1o/loND/sk8nEOa79w4hPrusByiZx4kuVsX9BM:Fv98GaZhHxDX
Static task
static1
Behavioral task
behavioral1
Sample
fa18e4d1a3ae132c6f8432066fa128ef_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
fa18e4d1a3ae132c6f8432066fa128ef_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
fa18e4d1a3ae132c6f8432066fa128ef_JaffaCakes118
-
Size
120KB
-
MD5
fa18e4d1a3ae132c6f8432066fa128ef
-
SHA1
9f1f14063d63ccb86580064068cec5d99f22c5c5
-
SHA256
ac05b0508c570c1766766a1c6ddf903d3ac4059158f46ce1977a26d56d44c2fc
-
SHA512
bd90d23415ac7e5305491d17355e4bac4a35baf325c7e7dc9c099fddf362c28c2786a69c1c7954567cf995ba13237c0bb41ceaae6c56e25c86e5808e70f0300a
-
SSDEEP
3072:Ik1s1o/loND/sk8nEOa79w4hPrusByiZx4kuVsX9BM:Fv98GaZhHxDX
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-