���(sXB�t ٚ���� ���%�1�{��5��{ޠ�戩䫤"�r9��#^��S��x�>�j]?��Q��!��k �r\�(�w�A)tHY��hu�%LW����7�[������V§9���J�f��m�L�{������T� ��aޝ��.Ce�ܪAgF0@��)J@&CȾ`G1��7uGyaՄM�r{~�8�X���Ryk��D���A�$$�t�&#nko��*H|=��S��Sa]�i�W�hA k�qgT���c(k5�I���:��T/xI��U��K?��w�����/��u����CIO�0�@�f��Sj<i���J�O\����2Մ*��aJ�����j�4���� �3�����]���^oh<�]������5zK��~Sʍ{|�}��� 2��>���E2�����9��]0g���i��,����D��-D!�3CK��71N�?* �j��O�=�e�)ׄf|����%Q/K�ùqqQ�|d©�U�o�y,��ːx��<�]}�=�;PG}6X���y6K�����6��@�=��_Y�4��f0su��'2���Ѭd�*�� ?c��-88�kG�2��I�Ů�[օ�m㝸Q~8?��5�/l��{�$�O��0_�|�����9�9�� �٩����,�NJo��-�x:��N�7z������=V6znTi�T �zD�\��x1gO�Rѿ!�����ܳ�.�ݛ눷@:��/Ӓby_�F��>^h@p&�m�q�Hn�ͪu�/����?���9r� Ӎ���* L���V������8�4"��dv�t�ݬl+k4��~a#E�2=�{7+�z��������[_3��n�|��@�*��Cm6z��vo]n�a�d�J���{���i�f���a��}̾�N�1�{G�0+�.oM/�q����t$(����]�~?*r%}� 5�::��`�ʑ��NB��l�k�M(�P�������H��j�N���n�O��8�5��,:> �p��F]Ԓ��Dw���|n��v���)p��D��8��<�y�j�[�ou�c"7)@~���ʯ���Z�NwdL�p���_H�l7����#��{I���mн �MͿ�E���h8�s2�̷/NM�+7uF��+)�y��n��e��Q�i��������0j��y�62�U���8�#s��8Ր`����n�[,�@R��O�ӳ���#����u&�T%���-}=�jW{�*��k���.6����+umV���ػN���5�~g���3�1F@Z����D��J���2Ģ�r|ajѺ`{��G2��n�q�TN�ٗ8��i�ŵ�����h���N��<?-�:������$���B��(��b/5�������B���}!?�S+��=k�V��d�]T�|�x��u@��:AYSσ8ɴE/1�W �~Y��z1���R��/Ω��q�*�h��gq�3���:hE뤿氡�;����4��h3�B'��K�K� �3+��N�_j1V!�\��N+�Ͼ�,�B�;��1RM��y0&g���\`�h�ϛraF͛ �6!k�5R��@�nbb��X帠�$�<Xܠ����h݄�rZ� �6� ��J��#>?�sf̫�����Y���+Z�ܔ]4t(�t��Y�l���i�Dtuv!Y�&�]����#���1�8Kk��QJ�r�� Ş���L�����%�Y�^��F��UD^[1ĖT�Ag��3�+��^I�� �S�{����(�:V�YƎ(B̪�|hG�Y$�+se5\$�"���������3��6�>�G͟D6�ߺ�]�p�M���Y�c��9"o��=I���Α�@���Q��ǽ��?!.'�����wE��9 ҾE�B����^Jp��NҏtOۋQ1����iϥ�OO���u�O�N����DM�i��3Pw�4Th�iA��Jz7�T�94���d��ӑ(!v��R�ӟ�!if���_��'�ӡ�+�%�R2�!��b�!|�R-��08yC$$T�(���PO#&&��=�=R2�!��I%�FL1i��-m�B��p�@� � ݂k���af�̿Ey�O���E^�&H�]��#S�kۉ�S�����6��~�Թ���i��5WK �����z!�W�E@Nh���ts �>$i�rVr���?.2�$5�X�9r8�J�+!����-��(J���g�,<��Ծ��*�O|N]:<K���LE�+��k��䩼H=�t��� 8�JkV������]���D^�vթψ�7���? RL��~<#�������y�&��OFbwo���}Jt��l2ېD!��S"���4b�����=�I0����F���͆ ��UGպO>�=� ��=��3�[��T���aV�������z���8t�Y�fV"���|[z�!����p���#A�־-Y�ޚό�է�8-U! ��y��L�q�h�0șCB�0}x�\Њ�C1���#�� ����~�c"�GI =Z����ĽxeZT�/U�G����m�j�A2�>C�nc�.M�F�xB�a� �y(��A���3�R�3�<B�A���G����~�ӫ�wk����Z��{�v�F1�� �my�]�9��yk|6�����ΰ̢�^��ҼC�[ؓ����T��q%5^Db�I�N<p�(� �\91��[�ˎG;�p��]u��s�`%����e���N����IW���ː�L7<��`ZS)��,\��tGB��d�5oN[�j?�>��r/�\VKa�d�3ŧ����h �t�U�/6��1Qoz�_�f����h#�n����~�2�x�ɇ��jJ`���� �rFs��'����?l����ތC�$,����X�4���GP@/�]�7�Ź�@x%�[���@���*�����Osz�`�H��3�QZ-KX�Q� 9����yW��/14�Xǎ��s�)|`�(t1�N��(S���aό�?���{}y TN��^�"�jX���_���ҺK3�V�<Z�5�^�3��}L�-;����(�uCE5���.�##B��Y}����{-+��l��M6�d���������J����|���c�j9ZVy�?ju%��� �]KT���� �_[�s�X����?��}]j�����i��f��S�o��4�_j�x��qL'����E((��\|�
Static task
static1
Behavioral task
behavioral1
Sample
65498297065d25247e7ab2eb2578fbc1_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
65498297065d25247e7ab2eb2578fbc1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
65498297065d25247e7ab2eb2578fbc1_JaffaCakes118
-
Size
2.7MB
-
MD5
65498297065d25247e7ab2eb2578fbc1
-
SHA1
14068fcd51900c7e7049920fb135e8ba903316a3
-
SHA256
84a99d40dd039bb1408c725d58a3209a2da10c8efbc0858a8bfb1ad348c051f4
-
SHA512
8a8274b82cc9f91fae42f26811c044813b765111fd4ea096b334dbc274057cefbb7bd347b27b40f36092b4aa6f32806094b15d535698a4153c4cc4ed903aa532
-
SSDEEP
49152:AAle3DK83U2jnwt3a37hhhi2mXjBHhnHbGeBw+Ep4Jv84/E/mZ35Q/:AAle3D1EYnw12hh6z5BXESGO2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65498297065d25247e7ab2eb2578fbc1_JaffaCakes118
Files
-
65498297065d25247e7ab2eb2578fbc1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 249KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 88KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 37KB - Virtual size: 16.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 351KB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE