General
-
Target
2104eadda9a28f4603767f96c2c04e59_JaffaCakes118
-
Size
1.6MB
-
Sample
240507-tm5rhagf34
-
MD5
2104eadda9a28f4603767f96c2c04e59
-
SHA1
4ab196b9797214e1c18966dbc9e9e3aa3b868938
-
SHA256
53b8e7337600d687388acac0495d2ac35e46fe98f906af1637539244461dfb9a
-
SHA512
81366fba83eec0ac8bc57088e270ce8bfbc59ec59aa53a3bf1f0990156dc5404fb026b6e601c711009b1e4a0833528846595f55e6f2f7a8e574c3ea63fcbdc75
-
SSDEEP
49152:w2g44RijDyaaJY2ah1vV0C9DdVPsK2YAGvl1VcCYtbe:g44ijDy/JvahT0C9bPsRYAYlsCyb
Static task
static1
Behavioral task
behavioral1
Sample
2104eadda9a28f4603767f96c2c04e59_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2104eadda9a28f4603767f96c2c04e59_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2104eadda9a28f4603767f96c2c04e59_JaffaCakes118
-
Size
1.6MB
-
MD5
2104eadda9a28f4603767f96c2c04e59
-
SHA1
4ab196b9797214e1c18966dbc9e9e3aa3b868938
-
SHA256
53b8e7337600d687388acac0495d2ac35e46fe98f906af1637539244461dfb9a
-
SHA512
81366fba83eec0ac8bc57088e270ce8bfbc59ec59aa53a3bf1f0990156dc5404fb026b6e601c711009b1e4a0833528846595f55e6f2f7a8e574c3ea63fcbdc75
-
SSDEEP
49152:w2g44RijDyaaJY2ah1vV0C9DdVPsK2YAGvl1VcCYtbe:g44ijDy/JvahT0C9bPsRYAYlsCyb
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-