General
-
Target
832569a49a2ec2535877c7f39288c238_JaffaCakes118
-
Size
28KB
-
Sample
241031-ql6evsxmdv
-
MD5
832569a49a2ec2535877c7f39288c238
-
SHA1
436f5a7a51f8c9a178fb478497c0d36f24eb58a7
-
SHA256
c5e616b77ba2714a6e50a98ef93e2acc136ee6da7d5fb3868735f0bf2952945d
-
SHA512
827f67d74e3880bd0acee6fa9ff5ac752a7779f07a1dcc02278b34c067a6a88134a89dcf6a9f548ee30016c37ad6b62ed43baf66513d2585eb6ed09c5d21b942
-
SSDEEP
384:Sdy+P8zGpsa6+8BUweVWydCWaRAZxvGJA+39+DXXJM9ayNNZgrlnE+VHzSWEUypS:tu8qwMd2RArv9k+DnJ9yTsVHzWUB
Static task
static1
Behavioral task
behavioral1
Sample
832569a49a2ec2535877c7f39288c238_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
832569a49a2ec2535877c7f39288c238_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
832569a49a2ec2535877c7f39288c238_JaffaCakes118
-
Size
28KB
-
MD5
832569a49a2ec2535877c7f39288c238
-
SHA1
436f5a7a51f8c9a178fb478497c0d36f24eb58a7
-
SHA256
c5e616b77ba2714a6e50a98ef93e2acc136ee6da7d5fb3868735f0bf2952945d
-
SHA512
827f67d74e3880bd0acee6fa9ff5ac752a7779f07a1dcc02278b34c067a6a88134a89dcf6a9f548ee30016c37ad6b62ed43baf66513d2585eb6ed09c5d21b942
-
SSDEEP
384:Sdy+P8zGpsa6+8BUweVWydCWaRAZxvGJA+39+DXXJM9ayNNZgrlnE+VHzSWEUypS:tu8qwMd2RArv9k+DnJ9yTsVHzWUB
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-