General
-
Target
826fde05cb1e4c08cee74c1acf31f2ca_JaffaCakes118
-
Size
306KB
-
Sample
241031-j9nfmavckc
-
MD5
826fde05cb1e4c08cee74c1acf31f2ca
-
SHA1
9a270b302671f76330bc0339f8807dee55e6510d
-
SHA256
ac86ac215d31812bd7754f9d4820e4982b7d79b054d9456afa615f7babe724ae
-
SHA512
37b8b2981e3d4c097f8fa12185e91aa6fbc1390c080199efe46ba769e4542fdfbd9969025c89663206e9a05e16ea793d476299e3e45b5b1d4bb8a1b21864e267
-
SSDEEP
6144:UCh7cuD4dq17Rj0JkqCc4JTA/0nVW5GJZ2tNYLj8MfsN3/mbXjSO3Gn:Uk7l4UxRj2v0TA/MVzYKj86sN3ubX2b
Static task
static1
Behavioral task
behavioral1
Sample
826fde05cb1e4c08cee74c1acf31f2ca_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
826fde05cb1e4c08cee74c1acf31f2ca_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
826fde05cb1e4c08cee74c1acf31f2ca_JaffaCakes118
-
Size
306KB
-
MD5
826fde05cb1e4c08cee74c1acf31f2ca
-
SHA1
9a270b302671f76330bc0339f8807dee55e6510d
-
SHA256
ac86ac215d31812bd7754f9d4820e4982b7d79b054d9456afa615f7babe724ae
-
SHA512
37b8b2981e3d4c097f8fa12185e91aa6fbc1390c080199efe46ba769e4542fdfbd9969025c89663206e9a05e16ea793d476299e3e45b5b1d4bb8a1b21864e267
-
SSDEEP
6144:UCh7cuD4dq17Rj0JkqCc4JTA/0nVW5GJZ2tNYLj8MfsN3/mbXjSO3Gn:Uk7l4UxRj2v0TA/MVzYKj86sN3ubX2b
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of SetThreadContext
-