General
-
Target
b5c33574ede3fe6c66ddf5ac4f97bdb4_JaffaCakes118
-
Size
229KB
-
Sample
240822-bg2hsathlj
-
MD5
b5c33574ede3fe6c66ddf5ac4f97bdb4
-
SHA1
93af4cb252c83d747e4e512a2fee331235505f54
-
SHA256
20d2f5cb3a67719858b8c050ed758bb8a0d4e96490d421d096eba52a50d4a881
-
SHA512
2a3809d980461045af2e8515f6c06903cfc43022ca9ffbb4790477b143b7803b04baf356bbd2e7688be81a92d81b15568580b8cecfc92ee60f916f40447ec255
-
SSDEEP
6144:AU+5/lX1Bn+aC1meyUGimMK4IrxGsu/CzUI:GdzW1meyUGphDxGsuQUI
Behavioral task
behavioral1
Sample
b5c33574ede3fe6c66ddf5ac4f97bdb4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b5c33574ede3fe6c66ddf5ac4f97bdb4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
b5c33574ede3fe6c66ddf5ac4f97bdb4_JaffaCakes118
-
Size
229KB
-
MD5
b5c33574ede3fe6c66ddf5ac4f97bdb4
-
SHA1
93af4cb252c83d747e4e512a2fee331235505f54
-
SHA256
20d2f5cb3a67719858b8c050ed758bb8a0d4e96490d421d096eba52a50d4a881
-
SHA512
2a3809d980461045af2e8515f6c06903cfc43022ca9ffbb4790477b143b7803b04baf356bbd2e7688be81a92d81b15568580b8cecfc92ee60f916f40447ec255
-
SSDEEP
6144:AU+5/lX1Bn+aC1meyUGimMK4IrxGsu/CzUI:GdzW1meyUGphDxGsuQUI
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Adds Run key to start application
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-