�J�i_²��1����ɟ�ϜF��Ũ�pr�<�M�ap�a��B�Ƃ�>���A�r��v=�$��Le�v�ZO�S ގ�!���Cl�@�U ˃�ic<d�؆�ԗ���d0jL���I�x�=��fs](�=�9��^h��">ߐ6[qCR�I��� ��τ+ۦP����Ӛ���kP�j� ������7 W��l�����Z_A�,���[����-P�RW5�b<��D��Zî�\�X��q�i�SV�@hb:)�Ԭ��0���o��� J�ˉI�/�Nr-G��'��y�w2j��g.�}x�a�$��}�;ÅN�ΑW A {��Lc�\��REE���Y� �ۋ�4��7Mb@�9;�TE;(oĺ>_��3u �e��Ff�_�S���~BR�_1]��D�p���tk�����!c�寙����ɭ��r������*6��E��"����g�6�;�=`��E��_Yؼ��r��I֦k��(��z�\G�آ�3V����ff�j�m�sm�j!��WIN��i������6��'��'�"��'�.sN^,\��{_�W\�[��I�Ҟ�&a�|k��%c�k`�"��˨����S��#}���o��B����a�����9/��̿ڷܪs� ��aOFIL����j��H-)��d�f����ʫ��'����Cz�(�F�Z�x|"o�c�q���Y��N���ڵ�o�}x�͗,ho��=mq�����b���'���2}<`�%6�ޞ{���<<H�"+�f|�`��$��@-Xk��kj���V]z5XE� %Q�[� ތ�_R�`��n��i��k�^U> �i5p��R��=;#*`Y��4��PL�����0;e�t�= �'��AN����x�}bE��]y;'��6���&N�:@Zt��c�w䘅J~�}�,|�T\�E�:������LM�`O�\}� ��M�f�y���A��W�i,'�͠�����}���] �J�@#�|F�%�5B�A��$��M�m��r�|t�����=W+�aj�@��s��~d�۴t�FL�s�H��Vr�o�����m��`nP�੨��i�1;��審4��Ӗ-�VT]�LEV��)<���S��Hͫv����r�G�"�|)���Tl� �gy�d%`��&x�`𗈤�,�ARK{T{.1C �\q��,��C&�> � J�?�]�08P��H:Ȕ�V{�����g\dM�D�K����e��]�ZhǏ�\����#�2��X�C�д�@h�y�]�f��9�b66$�`����G��i�+k8���-~�S�MѺY8���CHI ~�F@o�i�#��IbD�����u֚��"�f�2u]Xb,�*09��ŗU 3G��U���Xg�z3�z�^p�-Q���uP�*�4D@J��X=s=mt�xMll%���<W�*'���<�t&).ߞp�T] :��AR���Ђ@k)}#T�-\)yd��mx,��u9U��[�q�%�_��tRpks�s�_��m�v�����5�Ԛ��65sT�������; #*�b.w�A�!r��0,"��l�U��>���&��aTP2`C8N�}�|�N���P��a�{�-�Ђ��Su������'�̈́nd�S7焿lG��h�K��su�*�������&SZcdpGVA �Qc����J>�_���_�jC!��+A�/r q'���;��}�ʣ4i��h� H9�5н'����x)���1�3?��s{�څ��c�L�缠��x}9F��p'�-�B8�B�� �G�� \Q��+="�f�DƠ���=�4 *��!)�Rբ�̀�ʎ:�{��Ƈ�[N�^ð��@��<�'WېG��l�A�E�mIY��dy����ϭ}�6�?�k������%�k�kO��M~@ŕޔ��\���ak����5���g�r�=X�\7���S�e�J�X3b2K^E�e�Dґ7��2��]�],�f��b�j�XD\�^����=,$��&��J#E��ei�eʌ�u9T/������c= ���GkY,��\��ޠ�[�������U���Tԗ�2��k�QL�.�K*�4k\�����0p�=�s��DD!C�Q�� !�e���Y�R��ktJ�<�BЬ�u�>ӓ�� ��l���/�����ܞ]D�f���&�HJ�g� �����գ�d��!sN����LK���q�K��d,Au���트��wJK�t|���Cj��F��.v���D�ܚ�x���z_@�����ԁ �RfÅs�%�A�<%�#�)#,���EX�.!v �I�}�V�k�r�����i��p<i� �8��*�yϛ�R�=��~�� ������n��\pvmgxW jBP�WH���� �EG���PubS���� ��5���'���;�XEW����k8ImI��η_B�V��9�Q��z)�oq�T䈽�ZOv @&p��Jp��i�֡ 9uf��ޚ��{��D��u�9K��v?�,�z:��>)����������^܄ៜT1���l6t�}2"�MJv�T�o ��Fּ�V8��!^�l"�L���X:���/pi(٘�f���d����0�F���%�B�ک ��>�ֹ�h�rX ����Ű�Y����ڤ����JnF�"KN4�24��Ǒ6�W�L !<�����b� �8l4�<��:�B��y�Z�9ޛ���.�>�@���[&f�}� ���c�$���%+:x�{�$p<�����o�@��#��,u��{A�b�k��K:1��l��ҁ�s���;�b��٦�O�Y��r��3�d�1I\>�Q���28)5�������1��U__:w���:�OlңY���/��c�/��]3�G�M��ZH�rV>n�PkN��c�R������b��p�TQz��$�ܞ`�T��V��e��������oI��AI��4�c_V��.e#Y��a�f�*����=�����=`>)B{C�3s�FZ'�4zGڪ�j0���4Bu��{*�({W@:�#^������ f�W��>�e��D�V>�������=���[_ ����Ԟ����J"�w*9���W ��6Nnl����+('����b� =� �N*T�g0 ݙH%��FV����Z�������>g���O��9����H��#�]ջ��)G��.�@���x�뇙)P��=�гznH��^���O���?�<ݰD��;�Wv>�~(N�d��.'�0/��\Y�lN�m��-S �y|�gd�*T�͉toi�a�A�G�v��+n�����3[I]��d�CP������ �3vMX��d3?�2?�u��A�u�"uL�rv2� �OT;v~�;F�1z������|�����#c�C�j�rM���x���LÈ��@�DȢfQ�X��3�ʥ!��� �Z������)���C��2��� ��z���\g�n˚M9x��8ބJ$ �O� 4M��t� �+B/��5�NR���,������A�@!��X�W9�1/1���-0���=��a%���b�?L�$�m8]f$��;��#WK�+����.N�0C�:� ��R�k �rP�i�|�K���Iv������-��ss��V��◒aa�LDb����NX����p�_@E����|�~�q�&�Mz��GTy�Y�(8;C�m��؊��TY�2,�` L���������y� �F�Lg����L�iZ��teq�&���s��IY.[�\ZGMn��#���*.��;l�.�����8|
Static task
static1
Behavioral task
behavioral1
Sample
f96c6016e4b5a7268755c91a6b11fc35_JaffaCakes118.exe
Resource
win7-20240319-en
General
-
Target
f96c6016e4b5a7268755c91a6b11fc35_JaffaCakes118
-
Size
2.1MB
-
MD5
f96c6016e4b5a7268755c91a6b11fc35
-
SHA1
69c5707f6f260dbffd451a1eecd99f9150d93554
-
SHA256
e6ce11917223f46147c644fb6f642b90d91fca0c623d5f1b3f6153f8c52d9537
-
SHA512
6a055095e91ee2f0830086853607bcd506e268424225c2d0986a30b795bfb92751190906c7b4c40e05a019fffb9d58c9ff5b98b91d9015c0143acebfb672ee97
-
SSDEEP
49152:YuUJHU37QPg1Iypdo3f03LrCdbc4ml+TM4Zphd0f0:YuUJHUmg1IGdo38rMBw+TMd0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f96c6016e4b5a7268755c91a6b11fc35_JaffaCakes118
Files
-
f96c6016e4b5a7268755c91a6b11fc35_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE