General
-
Target
fa3bb7c5e5da20ac05491e4ce8403dbb_JaffaCakes118
-
Size
255KB
-
Sample
240419-nzgybabg4s
-
MD5
fa3bb7c5e5da20ac05491e4ce8403dbb
-
SHA1
208ba1b4b8d995310c4c7b8559eed304259bcba4
-
SHA256
78bfa1a550322ff18164ee96d55eaab48c5fe889025579760521b0e15f0fc354
-
SHA512
3f69a9a47fa1594dd84a1972cd2629c0c0a4837948a18a0f210eb72f646de9a93576d8270efea9d2069ac636113d2af7cc4bd1273505e1d792e3ae43e56ef255
-
SSDEEP
6144:4DzKVL4s7rUXKm5GOQGM8ZX5VQqy2p9Z+Po1m4q+mAq4C7B7s:4DzKVL4sEDPI8ZX5Vk69Zw4qT4C7Bg
Static task
static1
Behavioral task
behavioral1
Sample
fa3bb7c5e5da20ac05491e4ce8403dbb_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa3bb7c5e5da20ac05491e4ce8403dbb_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
fa3bb7c5e5da20ac05491e4ce8403dbb_JaffaCakes118
-
Size
255KB
-
MD5
fa3bb7c5e5da20ac05491e4ce8403dbb
-
SHA1
208ba1b4b8d995310c4c7b8559eed304259bcba4
-
SHA256
78bfa1a550322ff18164ee96d55eaab48c5fe889025579760521b0e15f0fc354
-
SHA512
3f69a9a47fa1594dd84a1972cd2629c0c0a4837948a18a0f210eb72f646de9a93576d8270efea9d2069ac636113d2af7cc4bd1273505e1d792e3ae43e56ef255
-
SSDEEP
6144:4DzKVL4s7rUXKm5GOQGM8ZX5VQqy2p9Z+Po1m4q+mAq4C7B7s:4DzKVL4sEDPI8ZX5Vk69Zw4qT4C7Bg
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-