General
-
Target
facb1194670abea1d2e6214982d0f6d4_JaffaCakes118
-
Size
120KB
-
Sample
240419-vv2kgsad59
-
MD5
facb1194670abea1d2e6214982d0f6d4
-
SHA1
2009a7d920afe52402114cd59d2e3cc02b8a8b88
-
SHA256
f80f66e6be0c2d771fa4df22a4d5a1321d12b2be6019a7957cbc77e7c9b589ec
-
SHA512
ef104405c7944b6a36a76f007bb0ac1f0c5f38b9a9a8792fa333f103db520db8faafad6eb720b7aaea339b1bc94d81b6d8c1847a4fa2a8b30d4dc66f0116294d
-
SSDEEP
3072:RNBtaKSkuUnrU82LWekCxPTO0xa46aofwKqp:R3lSkurzr/P3aOo
Static task
static1
Behavioral task
behavioral1
Sample
facb1194670abea1d2e6214982d0f6d4_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
facb1194670abea1d2e6214982d0f6d4_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
facb1194670abea1d2e6214982d0f6d4_JaffaCakes118
-
Size
120KB
-
MD5
facb1194670abea1d2e6214982d0f6d4
-
SHA1
2009a7d920afe52402114cd59d2e3cc02b8a8b88
-
SHA256
f80f66e6be0c2d771fa4df22a4d5a1321d12b2be6019a7957cbc77e7c9b589ec
-
SHA512
ef104405c7944b6a36a76f007bb0ac1f0c5f38b9a9a8792fa333f103db520db8faafad6eb720b7aaea339b1bc94d81b6d8c1847a4fa2a8b30d4dc66f0116294d
-
SSDEEP
3072:RNBtaKSkuUnrU82LWekCxPTO0xa46aofwKqp:R3lSkurzr/P3aOo
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-