aH�/L,�X4m�m�IS�����4 ^,*��$�O��� f���#I�����G>y�s��!�'�3Y��^Cư�WZ�1���KȾ���Q�HPu?,����gN��<tc6"=�a��D��X>?_�r���Kz����/H��}��k/��P��S���by����c�&�ӧ�-��rb]7�S��;O�7�!>�%��{��m��_��k�n�m��BA���?&ġ�]��诓k����R-��ܑ����p_2�ʜ ���]Kpd�A�`�b�M�����^��_^���?�a�1C���>?�`�3c9�ZhYsxٞ'�f�%���'��Ku��@:��XG��s���r��m����*Ս�*����xK[�bLggs*�B;���'/���-@��|���/�$`�%aHO~��N��K��B��`G��,(٬ IB��]ny�TA�p9K� �hܦ� �RP�U��j�PΡ �mGp?�5��gn�����]�;����vߐZ W�`��?>�(`�M����N~n�b%���V4 !*'�j���;q �C 5|�It����H����5�w����}2�|�~EV�Ll��eN�ODI��n�Txq����/Y�vc8�V$� ��.��K���8� ϩz�Hlh�5�����>�jmh�䣜�;�J��9��*�]����9��0�.��]���0���Ld�;�<�=�*��(������/._�)�L[!���1$T �^��*����[�����}�X�7��|L�c��V�5����v ��ȱ�_]�*�[ׂq\��*PF"�?iw>ZV���*�R����J����$��:���Q�����1ޠ>�d������lK�@U/�;����d���u�X��bu֫�y(M�e����p�쮾�|��H��� �� )���ɿE���Ď��TS{]��g78 ���h���p��k>38��S3Kܸ+Ң��}���i����6��c6���h��Iϋ������I�`�{��@�|�^S#����L�z�b������.��� �Z���o�=G�S؞�*��&����ŭ!.�ۖ�Ζ��ec1%tp��.Pֺ���m�� �P�~I��� �S'�!u�����1��S��B��؎_��Q<a8Z�������� W�KT�Fuq�[c_{`G�G��&���1�� �)m�i��b�.��O���3r�@�OZІ_B�g�Bu�j�IJ�!�E�-��z>�P����H��??�ƣ ���.�9Ɲbe����Z�ÁVR��^� �J�m^�7� Iث��QŔ&A_�'$jeC�2�t*��������~�vT�B�"�UVǿ ����C� ��7�Mo���t=�L�l�6�\yg3� �Z��ؙg5o��ka��2N��OK�#�����ނSғ�ہ�o���&�ʠ}�o�A�b+�VQ����-�����$b����d*.��Z=d$C��>qg������\�$/hm�{��K��؏Ι�=.m�5��2w½e�}��P���֘H�5�T�$���&���=^>�n����ʮ��^�O�+��+���nHq�>�k��~�r���ۂ����"g�N����!�!���2�0�5�ws̎�k���>3�9]�<���yj� e�ѽ�4��m����˪T�<l| �Y�*�e�����t�gȆpH2cݡ��ɜ�E"(�'���<���3��*1�@�˵asZ(.��O�~�����U�M������fJs���7 M��V������P1-��$,]��sh�����fN���&�����F�B�Z >rj�!4�h-��� =ޱ-��4��"N(�����\��M�4��H��&�^�%Sh�Q��Y�y��~��D�w/�729<�~�ok������b�v���6�t� S1��űJ��e���x�OA�C~���.e�����7��n���ȇ���W����\:��v��:*|Z�8���!�+����xG�.���^shmm�s���l=��;��H��D��y�X��qw��B'��'� ��`�,K<U!%`������G �B�d��������[���<&N����j�nņ����j�y�T�����*�y���h=��i�y^{z����i�C��7[�qV���)4I���ctw������Dd�oJ$41�Z_r��Y��˙�t�� m� �ů,����t��#���xP�`F��fIvQ,@w����M/�:��m��]��Y��J����AH�Z�N�`jb���~��Îf52[�[Q6H z��J���`Z6���>��洺 ����=.��58p�@6�����Ȯ-�NS��g'4���m�B�F�!#� ����~�����l��],���r����%ǪM��A�Y�Ru^_քVg̚��g��2R����e�IT���Nh`�"{f ���FF_������� M~s�"{�#�V'���?ڱ�����c��6�A�l�aOc�|��������J�y&O\}6��7�d���xP@������{mE9iK=���v�@c��i$o ̦T�Ly�-��sus��0�UK�0�ꬸ-=�}J n�s�jBGQ��N��$U������l���J`�q��Y���? ���ԢLa�����|6����f$��Ϛb�|}�kԀ0�+�qD����#m��+P��.�g��E�=E�S���7�ժP ������$K��/xtrf��3���,����V���0����)ig���T�+E䠽1� k"ks��A�_�26�sq��5"��ȕ�Gh��#TN� �<���8wr���> 0j��S�d�������i ���!�Ed)J�)1��\���^?����Y����cx��n�Є]>� O��>J� a�˸�� �����bkp�7R��*��3-�o�$P�R��fߦ���<�4��4��R��Vr�*s �J����GQ_̅0��������2K�$�E]I�U㺶�Ҍ52]��%QɄ*��@��&�%�m��;O�������L����IvOO���i��P"~����(~"����91@�M�V��&��|�n�� Q�(lM;�y��c]����v��_���x���n�����I��F`9�+�V���q�b�_Hi�BW�X�U5�o�B�Z��� Le�9��NOph�6�p�Dr������� �_}M��V�Id>��q]����h2KǾ���q� ��m���� f+�fI)lb6�ԧsl[8�b��>�!��N7H�&���*���5�X���5�S�%lH!#3�����hZ/Y����9ݍ�!�od�e�����02R4����}��Ԯ|��^��W��7u��PwN�_��D���g��£%-Q*��ۻ:x7X����u��N�!��dG��
Static task
static1
Behavioral task
behavioral1
Sample
a77b12f03513a58e2fd73705dc3270ff_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a77b12f03513a58e2fd73705dc3270ff_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
a77b12f03513a58e2fd73705dc3270ff_JaffaCakes118
-
Size
1.3MB
-
MD5
a77b12f03513a58e2fd73705dc3270ff
-
SHA1
66c726fcd1321382d6ef638954560ff9f0231758
-
SHA256
bd5a84c5b333d0b1984fd10d37c94cf0ac53918cd1c3894b1cce2a93cf55a7b1
-
SHA512
83b22aa9549a90987555895e6d2fe34071135adedd0d491c094097d6f7fd6a9145ec5af04f8867f50b59ecc7dad0a1139f85f8572ceb654bb45d8d3b89d7ad84
-
SSDEEP
24576:R3KB2B7zefnpzdPeD3cTDthdWFt4bzmx60ndAqVlkTQNrla:RKB2MfnpzdzTDtGFtoqvuCl/l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a77b12f03513a58e2fd73705dc3270ff_JaffaCakes118
Files
-
a77b12f03513a58e2fd73705dc3270ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 47KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 166KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE