��As�Μ��*"y>�Q�ݴ�}-�XJ>"M����`��X��1�����۟JYT��}� ���2Cȭ���O���(:����)��I@���Q�+����6)"��X�f�T�����F(j\��"������0�ʗ '&Hrߥ?����FlL�����-��r�b�(xnVfx���s�����NDF@�2KP��~q���"[&1��np�Y�%�)�rx��o6�G't��a�U��n**^�w��F���f��W���[�?\ێW\��kߑ��t����|z�<�N�&v`���c\q��<n��r���g�έf��QȦ��H+k:��z?�ͫ_a��Zĸ9�O�z���o������+�.�bX9;Z4P��ܥv�����cf�}��V����{@��4��0ovd��*��4������}�} 'W�4���L��W?�������2�ϔ���\V��>��-m�Q�� W]ͨ���q�J�wb,�ϙLf &W����ӿY1��r��[,`B7Tn}3@����䐷M�=��ěOQ�۟������״qoID��Qz͋���m�.7y�X(4�h(�_�̨��`���c�o�h$��FmNA�����X"2��U�4��τ�=dُ��L�,I�� ��Z�M��Y�� �v��G���&�H� ����$��|�w Ps�xC����<���04!ȴ�z���E��^��/��B�sFa!��9���)���_��`���HdOve�UխK/7n���u���}�+�e=H'��]A���u�G3b�[�d~_�dԱOp�!�8�bS*��,�����8��M���j�P�C��N����Y�*�SOődz2ڔTP#%|������e��M�4��ѷD����@���2��U�����9h�uVS�܍����,L<���+�!V�kT�� zi�S��zoǠ��Ƚ�K&�2�69O��x�(X�� �`� N} ��lNN�!��I��nK��%N�/�����O���Z]��_dr5p/'��x^y�q>pu�/����v;��h&�VA��:�}�� ��X ��K ժ�L�(y*�}詡 Wl�!'�f�:':v����+\Ѱ�<��U��ё����͙��"�u�|%�ȏ�����ڪ���}�L��蒴*�ɾ��.M��M�Uc��i�Е�ժ�O7U� Rl�8��Հ���!m��\�4���I ��rO�����vHJx��,���UV#����z�JZ? ��g�CD�NW8wJ\(���V����Q5�n�����v��"�2u���6W���?��;��PZ��ڻ���8�1 �b�������Bd`��۳��8���Ƥ���~���<������e���!��,�_�C�)pRf�ZEN+�_�DcH/�<5MX���-���4߆�P�����5�(��a��q��J'a���1���7�n���;�;�m��|����Ww:@J��x�x���+��ͣ�^�����k�*�,!A�m��X�H�B�zX��J�mΚ/��%��m_�K ���%�H���Z�^ �2gs�UT���B4��c�xS��,6�R}Q_x��ך�$�"ytvv*�t�F���pk�~���N��h�$�#.�'��=ΐ'��͠ ����?��F�sH�2e��D�k�ԫ;]��� �����iO��X��yΗ�"2C5���\DR�A0/� \�|8 �-�o�%WuRT�v{ܺ>��D1L�܌�;rl��-xF��5)�@�Z�uۏ$nE��{���L��O����`1hW�LE�@��� $7�kKj� ѩ� OR���j2{��W ���������r�[���@�7W������bƲ́�I�����}��*-6b�L���m�ý2����,��ǥ�S�RB4>���7�iT}��xE�X`����x����LL`�z_�E�R�TBK��˾���m�����xn8�}�O����#d%���{��&�?Uܑ��A�R`���z.�f�����5�{z%��Gw��������g�àw��U7�}�?�鯘�!�ƙp� �jK�4�In$PXÁ��yh�+��=xB����j���n�]z�"+1B�F�R��v)�">�)��/h4�ʸ��Uu.8�!+RS g��Y���G��N�`DG�[i�0�&��c�nŚ b��B�9 s���C�2 V�Y���g�u��_�{%�\9�phт��=�>���3�����䯜��5[����FcN����pfBXk�;OD��I�yO�R��Z�,����Hҁ�-���/��V����GQE� ��9���#(�"���|�ƻ7_`X����<��_c۽��������v_v�R���$z+��E�AM��� �CM�6vGx�9W@�����$)�48·V×��s�=G����PH�U��-�@7�����^�g�/5���NX%��DV�E�u�U���:�>J��2���\�+��i���>��Ȏar" ���ї}N���*0+.���H΅-�M[�O� r�g%BuB��hX�Q��<�Ø�@(OJ|�s ��]�)Y�b���'���d��z������l�~Q<�vِ;��wMA��#��gC���N�"F7~mQ�s�H�ɮOP��q���-��,M��F�(ߴ~�u@��3�%�&����8�;���T�GOCN AƵ�����?U�:KT_P��&0��(��7=։#7�}矤�H�sNKZ��e�Ѱ��"ڀp2���ۿ�xD��1�/_l��jzK���K�n�`���e0�,����s�o^9G�0Y�3H���������t{�`V���1������bk�i�):MZ���F!J���^�=x]�1�f�{8�D6!�����M��{]�������|u�k�me�0����n��v�:o�� w,��c]���.�����z�FiPڙ�����E5T�ƍ#���� �{����u��vL����%�c�ZL��##5��� �y��u�������%�y�������Dp��χ�J��7!��ұ�.���T�Hh)�[���O��\ͻ����T}���T�5�y����ϧ2Kp��}���"7� Pt�$4F�.�mR�xB��R38bv�'������{��!�Q
Static task
static1
Behavioral task
behavioral1
Sample
9674aca6e8ff0a18e891aeffdcd784b6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9674aca6e8ff0a18e891aeffdcd784b6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9674aca6e8ff0a18e891aeffdcd784b6_JaffaCakes118
-
Size
5.5MB
-
MD5
9674aca6e8ff0a18e891aeffdcd784b6
-
SHA1
ef68a34b037003ed6c31fb4412319161ea6451e1
-
SHA256
efa024495c12b2aa6ec79d4bc94e8d1631557ccffb8a10431465aca253005fd7
-
SHA512
bae7e1373c69fe56f420f153c333b2f644223d22289c1d5aa4e2eebb87406fcc967157b0b75b3e7e5fd7a86e5aca4af3fb5b2ec4e38b2c900b816b13fe2227b7
-
SSDEEP
98304:7F4FY96/WXtnjVq7H9J9GRLunTjUHqdWlYwHs0+abybJ1D227i5PyrN0/WC:7+Y9yWXVjV2HkyTjwDFHy3D17UyCe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9674aca6e8ff0a18e891aeffdcd784b6_JaffaCakes118
Files
-
9674aca6e8ff0a18e891aeffdcd784b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 28KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.1MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE