�9����!E6�" ����z,�_���\���|�|T���E �/t��Մ��V�"in�F��M6�ۍ��'�t��$gmi@>��p����.��_�O���ftA�VX�:Y�V���hǀr�9�ޘwML��0ȹq ���� ����U�E��'���|K�3G�QAU�Ip�?.��A�h �|2Ԇ��պ�������e�����!�8*f%E�@9k�f r��'t��HC����T��c0�fh5/]��1� d��Dk_{H X"�!��j�:�;�0������r�Kę�xՐce����l�>zxq,�O~���8��<J��D�䭯�)������~�Z�����ȍ�u4�͆��L��<d���?-7��w��9��E3�Y��0Zs+�\:,�c��w��4�0���(2�g�zQ�D����7�p1E^�|�u��ş��m��CW��t~SDz:�[����Q�%k�!}�!'K}A��Ѽ����OC���vwpN&}�39��'9i�L2�BސS�2�1:���Im���q�rW���Z_�O@0H�z>�i 0�U8h�<6���2^�7�և���T=wf-��zJ�Q(U��V%Ep�Ӱ�������x� �-���m:��F�{����}ᱶ����Ew��Mz&��� !�?r�d��[|<���B�>꺡(�:h\� �n6���{O�A��<�8� PKˇwZ��9.�m���@�I� ���Ȧ�E��h&��٭h;Zϫ�0�Z:#u�{1�����;�ד���}��h�,g%m&sZθj��� ���Ԯ��(���9Ţ�?J*���,^J $��#����p+����5B�]�<�x>I�{��*�ul���w9G������}l�лO�2�R��D�ыt;c� ��C��A�Ma���eh<���Y��ݷ�O�a�B>*�T��m �9���XV @nJLj�'�_"��?@�O��3}��4�Y��q^yZ�\��Ʈy����6E�hCg��ڛqr��.�c B{b�=�eQ�f_ѐsa�f���Ҙ�߳�b��8�f�=��0k����ָ��%����^r_������+N��d���������e(�%X5�� �x?��Cd���^a���9�v��( g|3ޫ$^���K�C������:_��֔t�#�<�����{ ����Q�sc�0��������c�_�f�8�YHb�� c�(�Hy�^���|\�Q ����%Y����ґ�}4U �j+c˰ ��aQ��)ӷk%�� Aվ'��ηCJ�V�{���:D�N�L�R���A�G�nU���@G�P�'y�{ ��$iOÑſ�����D<[O�W��^�u[Tᩛ~R���=��':^�A��������ܮz���y���D��9�s��>�f�v�n��v�;�鉵 },�=�[BP�<�=ͤ����~[��ыњBba�m9��t�\�W���]l����s��.�/��mj�����]o:�R�^� ��A�뾍�]�@jU�Q���"�{溺Vi�xi-�ٱ��K������~�& �<v��khDOu�N~�Z�hx���\4N�Cc��"p(HM�hpoN�C�a?]��ZO���ao�V( ��דQ�7s{RpW0��Ⱦ�Wy"��EZ�f��ڀ��?O�;��kW�p4��%ϴҵ�X��zA�Z�(U�Fwd�2�����_}�������g�ȹ?�������vM".��2^"L?2��t��{a�^��W��DFUm���0?_h��yT��ez���J����A�`��K�fI�~Ǝ.v}�˔D�iB����V�t�>�OrbО4���n�O>���}j�X��3@�R�C�+ڽR����~�[}�蠂Ue���xA�s KF٘]<O<��u�GF}BVN84!& �.:�3x^�����#A�����d�E��@�+�ULJ���j�𪾼�&��}�V��2��S���2��=��.�s<9���F $@*�+��&�H 9��\O%?�[�m��erc r��:s��Kk/�����\t��D�� ��v����ۋXօ��xO97M�>�F�x��|���D���&�_�rˏI�,Y�Ke�(R���6n~5�ʒﬨMV1ӝ@��X"Z�ᙪ���t�$��i�N�q�XK�0�����0����.������ Rm�!3�z��o�v�{��B�i��l�D��ܟ~H�ɋ�h�E��v!];&e���C�9�J��z�{�D��H��S�D�b����-�s� ���W�BH;��(��%����mwO�>cG��DB� aV���5 ZB>���z���9�(]c�;�o�PzU�1� 痎��֬3Բ*9��P�H1�0Ð���t�*�4 .E�9�CV��e�i�"�?��yYfM���#~�lD��w`��cH�GJW98�PKVD�ï���6;*}oW�g��I��YKg�%����wn�\���|����X���!Z_�˂�h����e>��FIq�<����%1:���������1M2�G�;tE�Jſ��b��$o�K _PRB{���]�A��Q̧lQf���������T!4�`/�f�bh��Z\~��ŋ Wд�緍n\֏�"_��L�n����;g_�H*T���X I/����O$4^pU���zB$u���N����jgI��zp[�@FSQ~��_d��Q�G�~>����/�o�0~�X���l��&����I��3�sџ[͍hvu��_Z*;r%��x �������n��'k�AE�8��Pm��Z���:�����8�!�զ������6g�df48Q7�����G94> z+V�uxq �NUذ�p���R��>���@��J��=Ѭ�N���rA���T����~�Ili����~�!Π�Vn��?��aJ�k~5q�;����+ 0T����e�s�a��39}�p�*�ww �c�&~���m��=�W�������:���#ɘ7�.�ܥ�Up�Y�9�g�>�����k�{���Bc��j�&���h��Zw�����{|��PIy
Static task
static1
Behavioral task
behavioral1
Sample
a8ce35aa76f24d16161e19c5afd2f925_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a8ce35aa76f24d16161e19c5afd2f925_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a8ce35aa76f24d16161e19c5afd2f925_JaffaCakes118
-
Size
2.6MB
-
MD5
a8ce35aa76f24d16161e19c5afd2f925
-
SHA1
a39ecab1de06b3a938f46548b1181347f052fa0a
-
SHA256
25f5337c4740c4d7f636485953c72f700a5f6dccd85b547634bca32f5e32ac7a
-
SHA512
1ab3e33aa3256d0a22dfd7d853dc93a6ecfb4cc03235517c9be6ae9546ce27c5f60442bb15062f067ad06db9d9836dd1ed79f1d318fade02ad1e3fdb71d01b22
-
SSDEEP
49152:vqWKAPstOlRA18jJYJ2Jr6VXfEvYP8GVJnCRblTCWrtaIv5ovRZC:6AEtO320+8kXh88JnYb0Wsc5SK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8ce35aa76f24d16161e19c5afd2f925_JaffaCakes118
Files
-
a8ce35aa76f24d16161e19c5afd2f925_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 416KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 190KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE