General
-
Target
9140bf8fbdefc5e1ae520d15d89fc464_JaffaCakes118
-
Size
790KB
-
Sample
241123-3cypwasjcy
-
MD5
9140bf8fbdefc5e1ae520d15d89fc464
-
SHA1
51ff8dd0f7f925fdd85882c4495cdeef89bd0b1d
-
SHA256
c6f0cc4fc1058b0c76a4aa46114362b4cfa272c289751ae170ecfe3be1c75733
-
SHA512
cc43c7264e3fda25a9699e945c33c6a0165c051ac3bbdbb22a783260e1656c9bf5b35d95420e59e0a5c469a7433ffdc56f1e7df645a15ae7a524c4b5cbdb2dff
-
SSDEEP
24576:JI0+LK2DeFyPkbBfBZD5u3CgaCScrTEdE:J8py4PwpBZFu3CgVXTEd
Static task
static1
Behavioral task
behavioral1
Sample
9140bf8fbdefc5e1ae520d15d89fc464_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9140bf8fbdefc5e1ae520d15d89fc464_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
9140bf8fbdefc5e1ae520d15d89fc464_JaffaCakes118
-
Size
790KB
-
MD5
9140bf8fbdefc5e1ae520d15d89fc464
-
SHA1
51ff8dd0f7f925fdd85882c4495cdeef89bd0b1d
-
SHA256
c6f0cc4fc1058b0c76a4aa46114362b4cfa272c289751ae170ecfe3be1c75733
-
SHA512
cc43c7264e3fda25a9699e945c33c6a0165c051ac3bbdbb22a783260e1656c9bf5b35d95420e59e0a5c469a7433ffdc56f1e7df645a15ae7a524c4b5cbdb2dff
-
SSDEEP
24576:JI0+LK2DeFyPkbBfBZD5u3CgaCScrTEdE:J8py4PwpBZFu3CgVXTEd
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of SetThreadContext
-