Overview
overview
1Static
static
16542343/HD...AT.exe
windows7-x64
6542343/HD...AT.exe
windows10-2004-x64
6542343/HD...AT.exe
windows7-x64
6542343/HD...AT.exe
windows10-2004-x64
6542343/HD...LD.exe
windows7-x64
6542343/HD...LD.exe
windows10-2004-x64
6542343/HD...LD.exe
windows7-x64
6542343/HD...LD.exe
windows10-2004-x64
6542343/HD...~1.exe
windows7-x64
6542343/HD...~1.exe
windows10-2004-x64
6542343/HD...2L.exe
windows7-x64
6542343/HD...2L.exe
windows10-2004-x64
6542343/HD...3L.exe
windows7-x64
6542343/HD...3L.exe
windows10-2004-x64
6542343/HD...LD.exe
windows7-x64
6542343/HD...LD.exe
windows10-2004-x64
6542343/HD...DE.com
windows7-x64
6542343/HD...DE.com
windows10-2004-x64
6542343/HD...OT.com
windows7-x64
6542343/HD...OT.com
windows10-2004-x64
6542343/HD...OT.exe
windows7-x64
6542343/HD...OT.exe
windows10-2004-x64
6542343/HD...RT.com
windows7-x64
6542343/HD...RT.com
windows10-2004-x64
6542343/HD...SK.com
windows7-x64
6542343/HD...SK.com
windows10-2004-x64
6542343/HD...LD.com
windows7-x64
6542343/HD...LD.com
windows10-2004-x64
6542343/HD...AK.com
windows7-x64
6542343/HD...AK.com
windows10-2004-x64
6542343/HD...AK.exe
windows7-x64
6542343/HD...AK.exe
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
6542343/HD-PTH/execom/BINTOCAT.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6542343/HD-PTH/execom/BINTOCAT.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
6542343/HD-PTH/execom/BINTODAT.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
6542343/HD-PTH/execom/BINTODAT.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
6542343/HD-PTH/execom/CMBOOTLD.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
6542343/HD-PTH/execom/CMBOOTLD.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
6542343/HD-PTH/execom/CXBOOTLD.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
6542343/HD-PTH/execom/CXBOOTLD.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
6542343/HD-PTH/execom/CXBOOT~1.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
6542343/HD-PTH/execom/CXBOOT~1.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
6542343/HD-PTH/execom/CXLOCK2L.exe
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
6542343/HD-PTH/execom/CXLOCK2L.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
6542343/HD-PTH/execom/CXLOCK3L.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
6542343/HD-PTH/execom/CXLOCK3L.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
6542343/HD-PTH/execom/CXLOCKLD.exe
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
6542343/HD-PTH/execom/CXLOCKLD.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
6542343/HD-PTH/execom/ENCODE.com
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
6542343/HD-PTH/execom/ENCODE.com
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
6542343/HD-PTH/execom/FIXBOOT.com
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
6542343/HD-PTH/execom/FIXBOOT.com
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
6542343/HD-PTH/execom/FIXBOOT.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
6542343/HD-PTH/execom/FIXBOOT.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
6542343/HD-PTH/execom/FIXPART.com
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
6542343/HD-PTH/execom/FIXPART.com
Resource
win10v2004-20240611-en
Behavioral task
behavioral25
Sample
6542343/HD-PTH/execom/FMTDSK.com
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
6542343/HD-PTH/execom/FMTDSK.com
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
6542343/HD-PTH/execom/HDBOOTLD.com
Resource
win7-20240611-en
Behavioral task
behavioral28
Sample
6542343/HD-PTH/execom/HDBOOTLD.com
Resource
win10v2004-20240611-en
Behavioral task
behavioral29
Sample
6542343/HD-PTH/execom/HDBREAK.com
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
6542343/HD-PTH/execom/HDBREAK.com
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
6542343/HD-PTH/execom/HDBREAK.exe
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
6542343/HD-PTH/execom/HDBREAK.exe
Resource
win10v2004-20240508-en
General
-
Target
05b4b3caa5654f548ac96f2eb92a9507_JaffaCakes118
-
Size
239KB
-
MD5
05b4b3caa5654f548ac96f2eb92a9507
-
SHA1
ad301ef7490a45caa47fb27ba2fdefc81263ddd8
-
SHA256
83baa5c8125cc35c38fbe2eb0b09eb61e71113822e3b88bd6cb4dad5920ebdd8
-
SHA512
2df76bf70045b56ec315fab561e1b4019b69910f07acc4685de6ef01fa0ec54ed9559d48c8d12eaeacd7921901f49c02e2069753b04af45bb9855ed146f07c88
-
SSDEEP
6144:qVjyNK4Ux35wNGhmJhsDXSfjLaZ9TyqNjcB:KjyA935wEhvzSfjLkFyWjy
Malware Config
Signatures
Files
-
05b4b3caa5654f548ac96f2eb92a9507_JaffaCakes118.rar
-
6542343/CBOOTLD.ASM
-
6542343/CMBOOTLD.ASM
-
6542343/HD-PTH/bin/BOOT1.BIN
-
6542343/HD-PTH/bin/MBOOT.BIN
-
6542343/HD-PTH/bin/PTPART.BIN
-
6542343/HD-PTH/bin/PTPART1.BIN
-
6542343/HD-PTH/bin/XBOOT.BIN
-
6542343/HD-PTH/bin/XBOOT1.BIN
-
6542343/HD-PTH/bin/XLOCK.BIN
-
6542343/HD-PTH/bin/XLOCK2.BIN
-
6542343/HD-PTH/bin/XLOCK3.BIN
-
6542343/HD-PTH/bin/ZKPASS.BIN
-
6542343/HD-PTH/bin/ZKPASS2.BIN
-
6542343/HD-PTH/bin/ZPASS.BIN
-
6542343/HD-PTH/bin/ZPASS1.BIN
-
6542343/HD-PTH/cat/MBOOT.CAT
-
6542343/HD-PTH/cat/PTPART.CAT
-
6542343/HD-PTH/cat/PTPART1.CAT
-
6542343/HD-PTH/cat/XBOOT.CAT
-
6542343/HD-PTH/cat/XBOOT1.CAT
-
6542343/HD-PTH/cat/XLOCK.CAT
-
6542343/HD-PTH/cat/XLOCK2.CAT
-
6542343/HD-PTH/cat/XLOCK3.CAT
-
6542343/HD-PTH/cat/ZKPASS.CAT
-
6542343/HD-PTH/cat/ZKPASS2.CAT
-
6542343/HD-PTH/cat/ZPASS.CAT
-
6542343/HD-PTH/cat/ZPASS1.CAT
-
6542343/HD-PTH/dat/BOOT1.DAT
-
6542343/HD-PTH/dat/BOOTM.DAT
-
6542343/HD-PTH/dat/MBOOT.DAT
-
6542343/HD-PTH/dat/MBOOT1.DAT
-
6542343/HD-PTH/dat/PTPART.DAT
-
6542343/HD-PTH/dat/PTPART1.DAT
-
6542343/HD-PTH/dat/XBOOT.DAT
-
6542343/HD-PTH/dat/XBOOT1.DAT
-
6542343/HD-PTH/dat/XLOCK.DAT
-
6542343/HD-PTH/dat/XLOCK2.DAT
-
6542343/HD-PTH/dat/XLOCK3.DAT
-
6542343/HD-PTH/execom/BINTOCAT.EXE
-
6542343/HD-PTH/execom/BINTODAT.EXE
-
6542343/HD-PTH/execom/CMBOOTLD.EXE
-
6542343/HD-PTH/execom/CXBOOTLD.EXE
-
6542343/HD-PTH/execom/CXBOOT~1.EXE
-
6542343/HD-PTH/execom/CXLOCK2L.EXE
-
6542343/HD-PTH/execom/CXLOCK3L.EXE
-
6542343/HD-PTH/execom/CXLOCKLD.EXE
-
6542343/HD-PTH/execom/ENCODE.COM
-
6542343/HD-PTH/execom/FIXBOOT.COM
-
6542343/HD-PTH/execom/FIXBOOT.EXE
-
6542343/HD-PTH/execom/FIXPART.COM
-
6542343/HD-PTH/execom/FMTDSK.COM
-
6542343/HD-PTH/execom/HDBOOTLD.COM
-
6542343/HD-PTH/execom/HDBREAK.COM
-
6542343/HD-PTH/execom/HDBREAK.EXE
-
6542343/HD-PTH/execom/HDLOCK.EXE
-
6542343/HD-PTH/execom/HDPASS.EXE
-
6542343/HD-PTH/execom/HDREMOVE.EXE
-
6542343/HD-PTH/execom/INT13ADR.COM
-
6542343/HD-PTH/execom/INT13ADR.EXE
-
6542343/HD-PTH/execom/MASTER.COM
-
6542343/HD-PTH/execom/MBOOTLD.COM
-
6542343/HD-PTH/execom/MBR.EXE
-
6542343/HD-PTH/execom/SETPASS.EXE
-
6542343/HD-PTH/execom/XBOOT1LD.COM
-
6542343/HD-PTH/execom/XBOOTLD.COM
-
6542343/HD-PTH/execom/XBOOTLD.EXE
-
6542343/HD-PTH/execom/XLOCK2LD.COM
-
6542343/HD-PTH/execom/XLOCKLD.COM
-
6542343/HD-PTH/hdsource.zip.zip
-
MBR.C
-
PARTN.C
-
PARTTA.ASM
-
PARTTA~1.ASM
-
READ-ME.EXE
-
chap10/BOOT1.ASM
-
chap10/HDBOOTLD.ASM
-
chap10/HDBOOTLDn.asm
-
chap11/BOOTM.asm
-
chap11/CXBOOTLD.C
-
chap11/FMTDSK.ASM
-
chap11/bootmanld.asm
-
chap13/HDPASS.C
-
chap13/HDREMOVE.C
-
chap13/SETPASS.C
-
chap13/ZPASS.ASM.vbs
-
chap13/ZPASS1.ASM
-
chap14/HDLOCK.C
-
chap14/HDREMOVE.C
-
chap14/SETPASS.C
-
chap14/ZKPASS.ASM
-
chap14/ZKPASS2.ASM
-
chap15/HDBREAK.ASM
-
chap15/INT13ADR.ASM
-
chap2/CFIXPART.C
-
chap2/FIXPART.ASM
-
chap2/PTPART1.ASM
-
chap2/ptpart.asm
-
chap3/FIXBOOT.ASM
-
chap3/IBMBOOT.ASM
-
chap4/CXLOCKLD.C
-
chap4/XLOCK.ASM
-
chap4/XLOCKLD.ASM
-
chap5/CXLOCK2L.C
-
chap5/XLOCK2.ASM
-
chap5/XLOCK2LD.ASM
-
chap6/CXBOOT1LD.c
-
chap6/CXBOOTLD.C
-
chap6/INT13ADR.ASM
-
chap6/XBOOT.ASM
-
chap6/XBOOT1.asm
-
chap6/XBOOTLD.ASM
-
chap6/xboot1ld.asm
-
chap7/CENCODE.C
-
chap7/Encode.asm
-
chap7/TBLOCK.ASM
-
chap7/TBLOCKLD.ASM
-
chap8/CXLOCK3L.C
-
chap8/XLOCK3.ASM
-
chap8/XLOCK3LD.ASM
-
chap9/CmBOOTLD.c
-
chap9/MBOOT.ASM
-
chap9/MBOOTLD.ASM
-
read-me.txt
-
tools/BINTOCAT.C
-
tools/BINTOCAT.EXE
-
tools/BINTODAT.C
-
tools/BINTODAT.EXE
-
tools/CENCODE.C
-
tools/CENCODE.EXE
-
tools/CMOS.C
-
tools/CMOS.EXE
-
tools/DEBUG.EXE
-
tools/Encode.asm
-
tools/cdebug.exe
-
6542343/HD-PTH/mbrexe/BOOT1.COM
-
6542343/HD-PTH/mbrexe/BOOT1.EXE
-
6542343/HD-PTH/mbrexe/BOOTM.COM
-
6542343/HD-PTH/mbrexe/BOOTMA~1.COM
-
6542343/HD-PTH/mbrexe/IBMBOOT.EXE
-
6542343/HD-PTH/mbrexe/MBOOT.COM
-
6542343/HD-PTH/mbrexe/PTPART.COM
-
6542343/HD-PTH/mbrexe/PTPART.EXE
-
6542343/HD-PTH/mbrexe/PTPART1.COM
-
6542343/HD-PTH/mbrexe/PTPART1.EXE
-
6542343/HD-PTH/mbrexe/XBOOT.COM
-
6542343/HD-PTH/mbrexe/XBOOT.EXE
-
6542343/HD-PTH/mbrexe/XBOOT1.EXE
-
6542343/HD-PTH/mbrexe/XLOCK.COM
-
6542343/HD-PTH/mbrexe/XLOCK.EXE
-
6542343/HD-PTH/mbrexe/XLOCK2.COM
-
6542343/HD-PTH/mbrexe/XLOCK2.EXE
-
6542343/HD-PTH/mbrexe/XLOCK3.COM
-
6542343/HD-PTH/mbrexe/ZKPASS.COM
-
6542343/HD-PTH/mbrexe/ZKPASS2.COM
-
6542343/HD-PTH/mbrexe/ZPASS.COM
-
6542343/HD-PTH/mbrexe/ZPASS.EXE
-
6542343/HD-PTH/mbrexe/ZPASS1.COM
-
6542343/HD-PTH/mbrexe/ZPASS1.EXE
-
6542343/HD-PTH/read-me.txt
-
6542343/MBR.C
-
6542343/PARTN.C
-
6542343/PARTTA.ASM
-
6542343/PARTTA~1.ASM
-
6542343/READ-ME.EXE
-
6542343/cbootld.c
-
6542343/chap10/BOOT1.ASM
-
6542343/chap10/HDBOOTLD.ASM
-
6542343/chap10/HDBOOTLDn.asm
-
6542343/chap11/BOOTM.asm
-
6542343/chap11/CXBOOTLD.C
-
6542343/chap11/FMTDSK.ASM
-
6542343/chap11/bootmanld.asm
-
6542343/chap13/HDPASS.C
-
6542343/chap13/HDREMOVE.C
-
6542343/chap13/SETPASS.C
-
6542343/chap13/ZPASS.ASM.vbs
-
6542343/chap13/ZPASS1.ASM
-
6542343/chap14/HDLOCK.C
-
6542343/chap14/HDREMOVE.C
-
6542343/chap14/SETPASS.C
-
6542343/chap14/ZKPASS.ASM
-
6542343/chap14/ZKPASS2.ASM
-
6542343/chap15/HDBREAK.ASM
-
6542343/chap15/INT13ADR.ASM
-
6542343/chap2/CFIXPART.C
-
6542343/chap2/FIXPART.ASM
-
6542343/chap2/PTPART1.ASM
-
6542343/chap2/ptpart.asm
-
6542343/chap3/FIXBOOT.ASM
-
6542343/chap3/IBMBOOT.ASM
-
6542343/chap4/CXLOCKLD.C
-
6542343/chap4/XLOCK.ASM
-
6542343/chap4/XLOCKLD.ASM
-
6542343/chap5/CXLOCK2L.C
-
6542343/chap5/XLOCK2.ASM
-
6542343/chap5/XLOCK2LD.ASM
-
6542343/chap6/CXBOOT1LD.c
-
6542343/chap6/CXBOOTLD.C
-
6542343/chap6/INT13ADR.ASM
-
6542343/chap6/XBOOT.ASM
-
6542343/chap6/XBOOT1.asm
-
6542343/chap6/XBOOTLD.ASM
-
6542343/chap6/xboot1ld.asm
-
6542343/chap7/CENCODE.C
-
6542343/chap7/Encode.asm
-
6542343/chap7/TBLOCK.ASM
-
6542343/chap7/TBLOCKLD.ASM
-
6542343/chap8/CXLOCK3L.C
-
6542343/chap8/XLOCK3.ASM
-
6542343/chap8/XLOCK3LD.ASM
-
6542343/chap9/CmBOOTLD.c
-
6542343/chap9/MBOOT.ASM
-
6542343/chap9/MBOOTLD.ASM
-
6542343/cmosboot.asm
-
6542343/cmosboot.txt
-
6542343/read-me.txt
-
6542343/tools/BINTOCAT.C
-
6542343/tools/BINTOCAT.EXE
-
6542343/tools/BINTODAT.C
-
6542343/tools/BINTODAT.EXE
-
6542343/tools/CENCODE.C
-
6542343/tools/CENCODE.EXE
-
6542343/tools/CMOS.C
-
6542343/tools/CMOS.EXE
-
6542343/tools/DEBUG.EXE
-
6542343/tools/Encode.asm
-
6542343/tools/cdebug.exe
-
6542343/下载说明.htm.html .js polyglot