C�4e�������S�����!��O�?m1�e(��)? � z�}�m)���5.�7Z�#�� 5�p_�75}��వ�㜪C�����a�4�����aJ��<g���:*s#��pϤ� ~hKϭ�M���-7�p���G�&Ẁ~�kb��$Ju���DJ��\��Bγr����*0��.�;+������;�����5�vj恥/�boY�4����K�P�6?�;��l٣�ƜxF��Ev�?�����!{m��v�vј �G�˝���j�y�9���K���ix���<��e�/�b+���M��p��b�.�l���3\>t�{ \������<� 8�:�m����� �?S�ɾ\ѹ�����ȝ*�� fݽ��\����i���H����E#�3�>�d2��s�������n7P�jSm9K�%<�ձrhƴ��-W�XK{�e"�y�Y��k�i)�V�����F�J��N(J+҇�Z^�e�vy\����f�0����w���2of�E?�!O�?�tg���(�3e�b^�>���f\��j����Y`���̾3#����s^k��d;Z��(��^WM�Az�ġW���� A���.�n�����|�K�8|G4m��Q�YT�D�wI�W�b3i�����8��LX)3��ED�-��������X�;�e��E�L�q!@ ��^���i�uH�4��>�g����½-��W�4�+�w�#_��s�g������:�t�i�qy�Py���>�I$�au��_�N."��P�W[��Ӏe�����U�"Բr3o�065�k���*���bb�B�AH��p?V�oB��B6�����z�(�������P] ����_NНW��#�� �x"�κF�9��y�I�QA�;�감 %��9��C;���k�!��e5�Kn� Z�%ۃ �^ �]ԱKG���V=O};�B���( ���ڋ?�W ?�5|�����c��N ;�hn4O�90t�NQ���A��јM���"!a}.�~.o]���F�0�җ:n\rY�����.{Ԁ`pm�V.�j�q��s^����b���k�x�J������tR�ӉM�W|u��TΊ����r��Ca*t����r~^�}v��Mߍ�tNT��R(�n���?��[Y��@Ɗ`c� �$[�w��N,�AQ�����ޓ��s���,��J�)��X���P�W���GR���s��؛���(�%�7)�V��z������ڱ�Lr��7���"���\���]�����P���K�����o�!�B���L�{!����X�M:���Y˱�&;}�����ܫ$g���uf��� �FS����w��~EHA�[ۮ������!���P��U�}����U�RSp j�Lʉ�v��L���H�9��슅��J҈A���\f�����C�C��V�]�y��adR��j�w1BO_ۆ��Hv�0oR2f��u���������P��P8���T#'��w�F�0�Y/=�6˘�"��%0��w�*��3���հ� fn1.$r�B��5v�s(�Y�ԫwg�Tr�{o�������R�����.֩�����y)�&�a�;�nS⽠R��u�����S��\cN��2�U+��iV��I�܁ ���^�B��/.= ֘�3�=X ��uB���$5^+��x�^ ]��ˤ����~4sH�/��P�jŏ~�(9o#��h��U��ޢ��x�7�n��S��/�x��m�;mg&��b�P[7����4 U*͉�K%��aa��5�б��vQ�\liV�Z��=���S��]��|��T`ⵝ�L"���kM�W�� �L�ٕU�S*�B���@>mMĉ����}�DŽ��)zx��*��͇�p��Ir2���Ya�(��������WQ�0�V���&jE4���((�]�НB��Z�����H�]�ג��؏Ԛf2*��� ���sPw����N���ܠ�u���V��a��?;��g��+�ڋ�M�:��$��0~Z���4y��r.�E�3A��f��x�pBHL�P� WV�7N��Vz����c�7*ggjĈ�ٞY���T�U��v���hi�:�����2��|*��PxDL#Q]o�y�/;�W�� ���N�g(���m� S�����7���{�>��'�rj�a��z[ʙ�&3��{@U�]~�����0�tlD[�����Xit�ݫ4r��_\��w��7��yce��@`�'�LitiX�8�h�B0��.g��`�|�����+":����� �<���]��/u�i��bR���͗y����9Wsώ|09aEM�����dX [�W� ��(�Bp]��Nb�F��d;��e{hJu�U����a�ؠ��O�4hCT:���ɧ�-�("|]ߚ�-@l���3Ŷo2�.%����K�L|���[ӎ�$���̥mw�����h_���W庇_^{���iy��Ͽ���t?x6�k�b��,������`�샧���-�y���R����D�dsY��X ���&�Q�#��xyh3Y$k�i ��N��=9�G�����檀�9����x�o�[|Yh�� d]�_���v�9�����Z`�T�4Q1��{^9����Z.���6 w3 I���Ҙ�C���ݩ�� u_ �d��Л���-�W�Be�T[���x^ٶL�L�)l��<�rk<��~�]tq2��;ox�����Q�����A�BN�z4|1���~t��1�2\*Ə .�����ͬ����L6����#�<q�F㣇�i��0B4)ɟz����.$�W�al)B~� �rd�����4����|��GS ˯=�N{ge2��H��*i�3�4���8-�I�4��Yω<(��oZ,�C�4��S��-���(C\��/S��e��*̀ґאs= � ��nb���=c��9)����xn5I�������h]l��IVS��Q)��|42���� �����I�u`uu(-{V��B��'3c4��BREH���5�U9g ����d�=圌\˕V�o� ���uy$�p ϭG�r�Xg�3�"*�R���`C�D[��~cM�#@��h cx���(��2S�®߫���B�i�<ۺi��Ͷ&i��[�Ic��ͼ\U���xt�����`DR$��9cpy����oO���B�GN�Șm�p6�nf�H.���t�C����\0����?�!m�k��@�v�B�t��d(��}�k��g�5��,6��$����4�n��������(wliL�B��Ik�&YrDn�GEG�H�ub15w?��� �2Ydv�K<K���w�c뗶.�Eqn>�f�� �!~Q���������P��~���_܈_D�ðD����#��]��������7I=��H 3%� z��z���OM觇+l�[��d�) �� �!�s/^ܳ�̶7!,Y���� �ܐ7�ICN՞�^s�T���W�aZ̿�I���E|hd'5c����>�G��A`7ٻ��
Static task
static1
Behavioral task
behavioral1
Sample
f012348c4de7851fafeb89c13eaf85e0bdb11943f5b7ba4b2bff4e685ad2e337_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f012348c4de7851fafeb89c13eaf85e0bdb11943f5b7ba4b2bff4e685ad2e337_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f012348c4de7851fafeb89c13eaf85e0bdb11943f5b7ba4b2bff4e685ad2e337_JaffaCakes118
-
Size
3.7MB
-
MD5
e89ee15581a2efec9dd9e2b47039424e
-
SHA1
d9589afded7264269f0ca437047674b9574a6e06
-
SHA256
f012348c4de7851fafeb89c13eaf85e0bdb11943f5b7ba4b2bff4e685ad2e337
-
SHA512
8bee28545a279b62f93834a10b5ef609319813fc22879a0c1d0893cd95ac6331d08a5cc2972abc3b4eea9745c7a7e91b3156427a7db787ce04386afe1154d68f
-
SSDEEP
98304:bsaSOtTRycnW4x/kInfItpr98dN9U829G:brSO1AcnLxcIfInAN9U82w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f012348c4de7851fafeb89c13eaf85e0bdb11943f5b7ba4b2bff4e685ad2e337_JaffaCakes118
Files
-
f012348c4de7851fafeb89c13eaf85e0bdb11943f5b7ba4b2bff4e685ad2e337_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: 834KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 209KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE