General

  • Target

    46ff8ae3884bf0add8740f6bd1429d3b_JaffaCakes118

  • Size

    2.9MB

  • MD5

    46ff8ae3884bf0add8740f6bd1429d3b

  • SHA1

    5db75066b6d0de3571c3ba1f4c4dce2186a9cc1a

  • SHA256

    565b5b06fc126afc0712d7a3a6ab1d8640a7246dd5fd78bd46ce4fe36e4eff5c

  • SHA512

    5fdee9561b6162d3d1254c4846969ea0e33b10a05f345a132bd5735471650675e8993212e477630e19e61def002187a94911a6d502beb3fc45f2e3fad14ba403

  • SSDEEP

    49152:BI/DeWhR9JXjqjp2XSppKLURG55NPHFR1/80yL92yAxY3pFlRWy3Ghbclf5kFE7q:BI/yWhjJWjp2i3KLQGRPHFzIsvmF+yWB

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

Files

  • 46ff8ae3884bf0add8740f6bd1429d3b_JaffaCakes118
    .zip
  • Docs/AcpiSamples/SSDT-ALS0.dsl
  • Docs/AcpiSamples/SSDT-AWAC.dsl
  • Docs/AcpiSamples/SSDT-BRG0.dsl
  • Docs/AcpiSamples/SSDT-EC-USBX.dsl
  • Docs/AcpiSamples/SSDT-EC.dsl
  • Docs/AcpiSamples/SSDT-EHCx_OFF.dsl
  • Docs/AcpiSamples/SSDT-IMEI.dsl
  • Docs/AcpiSamples/SSDT-PLUG.dsl
  • Docs/AcpiSamples/SSDT-PMC.dsl
  • Docs/AcpiSamples/SSDT-RTC0-RANGE.dsl
  • Docs/AcpiSamples/SSDT-RTC0.dsl
  • Docs/AcpiSamples/SSDT-SBUS-MCHC.dsl
  • Docs/Changelog.md
  • Docs/Configuration.pdf
    .pdf
    • http://034le.Todownloadrecoveryonlineyoumayusemacrecovery.py

    • http://050e.g.to

    • http://051.MoredetailscanbefoundonAppleLife.ru

    • http://Enablescreenreaderbydefaultinbootpicker.FormacOSbootloaderscreenreaderpreferenceissetinpreferences.efiresarchiveinisVOEnabled.int

    • http://brains.by/posts/bootx64.7z

    • http://com.apple.property

    • http://create_vault.sh

    • http://e.g.ru

    • http://github.com/tianocore/edk2

    • Show all
  • Docs/Differences.pdf
    .pdf
    • http://Enablescreenreaderbydefaultinbootpicker.FormacOSbootloaderscreenreaderpreferenceissetinpreferences.efiresarchiveinisVOEnabled.int

    • http://com.apple.property

    • http://github.com/tianocore/edk2

    • http://osxdaily.com/2013/10/02/enable-ntfs-write-support-mac-os-x

    • http://sotheyneedtobepreprocessedbeforepassingtokpdescribe.sh

    • https://alextjam.es/debugging-appleacpiplatform/

    • https://applelife.ru/threads/kastomizacija-opencanopy.2945020/

    • https://developer.apple.com

    • https://developer.apple.com/library/archive/documentation/Security/Conceptual/System_Integrity_Protection_Guide/ConfiguringSystemIntegrityProtection/ConfiguringSystemIntegrityProtection.html

    • Show all
  • Docs/Sample.plist
    .xml
  • Docs/SampleCustom.plist
    .xml
  • EFI/BOOT/BOOTx64.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Bootstrap/Bootstrap.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Drivers/AudioDxe.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Drivers/CrScreenshotDxe.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Drivers/HiiDatabase.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Drivers/NvmExpressDxe.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Drivers/OpenCanopy.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Drivers/OpenRuntime.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Drivers/OpenUsbKbDxe.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Drivers/Ps2KeyboardDxe.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Drivers/Ps2MouseDxe.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Drivers/UsbMouseDxe.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Drivers/XhciDxe.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/OpenCore.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Tools/BootKicker.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Tools/ChipTune.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Tools/CleanNvram.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Tools/GopStop.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Tools/HdaCodecDump.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Tools/KeyTester.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Tools/MmapDump.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Tools/OpenControl.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Tools/OpenShell.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Tools/ResetSystem.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Tools/RtcRw.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • EFI/OC/Tools/VerifyMsrE2.efi
    .exe windows:0 windows x64 arch:x64


    Headers

    Sections

  • Utilities/CreateVault/RsaTool
    .macho macos arch:x64
  • Utilities/CreateVault/create_vault.sh
    .sh linux
  • Utilities/CreateVault/sign.command
    .sh linux
  • Utilities/LegacyBoot/BootInstall.command
    .sh linux
  • Utilities/LegacyBoot/QemuBuild.command
    .sh linux
  • Utilities/LegacyBoot/README.md
  • Utilities/LegacyBoot/boot
  • Utilities/LegacyBoot/boot0
  • Utilities/LegacyBoot/boot1f32
  • Utilities/LogoutHook/LogoutHook.command
    .sh linux
  • Utilities/LogoutHook/README.md
  • Utilities/LogoutHook/nvram.mojave
    .macho macos arch:x64 arch:x86
  • Utilities/disklabel/disklabel
    .macho macos arch:x64
  • Utilities/disklabel/disklabel.exe
    .exe windows:4 windows x86 arch:x86

    494d1f97751e56730db3d7c26c2c6ff9


    Headers

    Imports

    Sections

  • Utilities/icnspack/icnspack
    .macho macos arch:x64
  • Utilities/icnspack/icnspack.exe
    .exe windows:4 windows x86 arch:x86

    7238edb3e92fdbe4e96e0cfcd066fb14


    Headers

    Imports

    Sections

  • Utilities/kpdescribe/kpdescribe.sh
    .sh .ps1 linux polyglot
  • Utilities/macrecovery/README.md
  • Utilities/macrecovery/boards.json
  • Utilities/macrecovery/macrecovery.py
    .py .sh linux
  • Utilities/macrecovery/recovery_urls.txt
  • Utilities/macserial/FORMAT.md
  • Utilities/macserial/README.md
  • Utilities/macserial/macserial
    .macho macos arch:x64
  • Utilities/macserial/macserial.exe
    .exe windows:4 windows x86 arch:x86

    c85c15c495adc4b03d076c3b8e655324


    Headers

    Imports

    Sections

  • Utilities/ocvalidate/ocvalidate
    .macho macos arch:x64
  • Utilities/ocvalidate/ocvalidate.exe
    .exe windows:4 windows x86 arch:x86

    bf21e14525f0bc1667d8d9cc79540bc2


    Headers

    Imports

    Sections