General
-
Target
ce4f34dbf8e0e4141f5a316dc65a16ab_JaffaCakes118
-
Size
140KB
-
Sample
240906-bkrsraxhkl
-
MD5
ce4f34dbf8e0e4141f5a316dc65a16ab
-
SHA1
8ec78a6fc368580a69022f98e12b4e7ad722111e
-
SHA256
2db8e98e7384c2603987607ba5d7436f397a22c2e1946090ebbdbbc6e4174e7a
-
SHA512
4a2c09086640fbd442b17d72e7eaf3834fce508a112de9c0f73bfd2b769a3b34b9699d9ce9fa345d61a8a7441ee838cb69c10563ff30505be4a0220c6bd9a202
-
SSDEEP
3072:JtJe09DcKlthXLmK5Vjh/WgkzeJKPjJ6mIZR7:JtJX5cKlthXLHjh/WhzeKJ6J
Static task
static1
Behavioral task
behavioral1
Sample
ce4f34dbf8e0e4141f5a316dc65a16ab_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce4f34dbf8e0e4141f5a316dc65a16ab_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ce4f34dbf8e0e4141f5a316dc65a16ab_JaffaCakes118
-
Size
140KB
-
MD5
ce4f34dbf8e0e4141f5a316dc65a16ab
-
SHA1
8ec78a6fc368580a69022f98e12b4e7ad722111e
-
SHA256
2db8e98e7384c2603987607ba5d7436f397a22c2e1946090ebbdbbc6e4174e7a
-
SHA512
4a2c09086640fbd442b17d72e7eaf3834fce508a112de9c0f73bfd2b769a3b34b9699d9ce9fa345d61a8a7441ee838cb69c10563ff30505be4a0220c6bd9a202
-
SSDEEP
3072:JtJe09DcKlthXLmK5Vjh/WgkzeJKPjJ6mIZR7:JtJX5cKlthXLHjh/WhzeKJ6J
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-