General
-
Target
74cb39a907ceb36b1420a6bf1a418efe_JaffaCakes118
-
Size
255KB
-
Sample
240726-try5hsyenq
-
MD5
74cb39a907ceb36b1420a6bf1a418efe
-
SHA1
22addb7204b6887be091d7cd74e6b1217660fda2
-
SHA256
00cc6b8f5964c78b0be201e49a8fa520fd56e0753cc457ce410192c76d822ef5
-
SHA512
95cd52c9985a4f6921294e4064d65c131cda3a77cea4f240b7e2f05467bc0eda4c8b3910d9865233af532c70d7ce8c4e3f1494f3928a4ceacddcf93bee86c103
-
SSDEEP
6144:/aMlSykJahFf65vZZYLiMqL4TyQOI5JgpcvqNplcV+o:Fl4JkVqxZVoT0Iw5pQr
Static task
static1
Behavioral task
behavioral1
Sample
74cb39a907ceb36b1420a6bf1a418efe_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
74cb39a907ceb36b1420a6bf1a418efe_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
74cb39a907ceb36b1420a6bf1a418efe_JaffaCakes118
-
Size
255KB
-
MD5
74cb39a907ceb36b1420a6bf1a418efe
-
SHA1
22addb7204b6887be091d7cd74e6b1217660fda2
-
SHA256
00cc6b8f5964c78b0be201e49a8fa520fd56e0753cc457ce410192c76d822ef5
-
SHA512
95cd52c9985a4f6921294e4064d65c131cda3a77cea4f240b7e2f05467bc0eda4c8b3910d9865233af532c70d7ce8c4e3f1494f3928a4ceacddcf93bee86c103
-
SSDEEP
6144:/aMlSykJahFf65vZZYLiMqL4TyQOI5JgpcvqNplcV+o:Fl4JkVqxZVoT0Iw5pQr
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of SetThreadContext
-