6 )�Ǿw=�&��9ޒ�vH?���B!���7t �sa#"�?�i8�&P���-�&���"�g+]��)��!��N\����8 V({9�/�����Dv�f��n7b_�&��������e��=�_�KTK���� (e�J[2�|�1�Iy(�:7���=�[�G9���.2/d��UK��A?�̴�4l��2 �E�j�Rl$��oF(�D��(5�e�?�Q'���6"39��Qܯ�5�|�S���*X@;K������/x��D]`�^᱕*_��j��ӥh?<��=��$1S���xYa�&�w���mW�݈4�9�<�Y�J= >8*��L�֠` �e\?�h?��X"�z�AF�~X����5�,h��s�����`���w��5n��=j�� +8�,5��!�b1��$c�]���XS��M{^���fࡾۮ�w[��;x�����ՠ�� 7ˑ���g���A7;^Rm�kD�� ��t�+��=]E; d����{s��#/�}{�JY-�=Їi��[�����ڛn���%��8�Օ>>k'�p �8@��rk�*ؼJa��#;L�t�E6<��p��E�|F�x|�������9S5��D��ҟ.R'�j=�S[c^��x����O��}��ֹ�ۧ����y�9#_[P���F�9��`z��@��2�5�Z/���~� �&U�R��#z�^��7�(��v�����b#m���}� phx���_�EEN���C��0h��9d���������X���dD�l�V�������~esS3%��e�GPv���2���O�cH�!4�qbi��6[ژ!�V���t||X��Jf���$�"�� +�8��d��H?��x��`Yar@�k}��p,���ׁߣ["��VM'rhh���~�����XVƀRj&)'+��o�b�-�g������8�`��+��[>ME&a������+�x�ɀT~9/`�^X�ַ1����@V����)�iܩ�1~}�����l,��#�?����4#78��סeS�.) �����|��J���VA�ժ�zIp~�:�M)�!Nt6����L?$�$r� �(e4rrS��] Z��o���R�|�1x�����,saQ������ d:gڗ���O�2�/�XdJ�ӎ�n�o���H��Z�$ɧO��#�@s�H���lg �B��5��gSwT�ߚ��^d��9Dh�>���_��C���%��Az�[a�?~N�W�c��D����VI;�Ǻq���kw$���fz{�����h���-I١�Q���s��ѳ/'�|��gj�VI�'`��w�>��c���iv�_PH Hvq����G���^��{m��y����$c#Ь�|�15�?�Ӊ�_Ŵ<�|-����6����#<B ���s*�3�h����ՀU��8V�*�N���eⳅ��%I ��?#5Q�)�����W$�Κ��a�n��N^9-hs�z ����z56cNB[/���cĥ ��c=���tM���"8G+S��3�(�m�о��0A��"�j�EИ3!�� �Vܤ��9=Hv ,�1p��f�`3�b��擡��+×LN*F�`q`���ŝbYZ}u�G�_������b�A��{�k3EWlh!pJ,���.���&m��^���B�E�)���#�</d��� �u�����%��C�W�tV�r�v�����5������+�{���A��\w;�Y)K�$����6�=�*ɪ��I��W��ǎ1=��,�p)�^�E�~-ꡱL(�zL�>Z�on�:8��ǹ>J� " �!�H��D��?�żmz{-��iBn2�Ԡ��{� �яf��7�B)i�V���KkfMB�������ŧ�橡<�p7��g�H D��ۧ�^�ڛ�lh{�I �r��4�3_�(0x53a�'H�[.�0'���z �.��<2��Fv��e��;�˳D��d!��� ��&g�P� E�OyE[�@�yY��M]<n����#�!+B��,|��墸�#�{�Ԅ6� U����8��K�k���k��u�s!S�����_�Zَp� �%Kq���x�p�rJ.��J;�n�I�a��Pz%��2�y�H%�T����V��0XK$�ȍ��١������0���e���EGzl�eh�e� &q��|��ߗ;��N���,�3��-T��'9���B>a�7�=3گ Y�&� ����o6Ⱒ�¢�� -�"��H����i�G�D��쳞��$� g����:�}� QDh�v��D����Q���Xg?[�<Q�Jk�f���yWy�7�`CȲ��4��(�-�3z�����@Hg�s�1���I��5�B����?4 g�RP��9lr�M�n=����WXjD���O�.T��8�Y�gϖnE����7.�v-��v��?D���14�Ea��2����W0�S�]�ɫ�H��4e�2%u����Eu-/��RG)� �f����S*���m�j���y���9�fw'��h�H#��� ���f�ԉ ����D�B���fN��P��S�[���p&��G3������ݛ�Z�QZ�r��{�N�h��(��}o{0��w[�q�c�r��u8~��V�\��J�|�Ӄ?���S��"�u����0�%�j/)�Y>���ܭX�2I�e~��pz�曬Pb������I(�=Ň�������H��<OnYC�����u/*U$jH$B���k�rc��z�4�.����pHF��N��DL6#C��W���9��_3H�Ѿ( ��'���ҵdu���r���aQ6�aDw�NL��O��3��o@:�y`~��.i�a�6Y3 �y�� f�7U��up�9����a�����h��(Dfb#Wv}Zh�v�k�f�t��[��3D_[�\��43�0{$ذ��+���e�o6,�6�v��u&(Fφ��\���� �e���<!�>�m�e�N�Jg�[z���D:��s eVM$8K�(�'ϟ(�(*_��i�n_��N����Wg�ͽ�f����v�\k OǦAJ���o����B&�����.nI����L�_[����wߓy8��,��
Static task
static1
Behavioral task
behavioral1
Sample
1005bceee2f92bde51d74a72fd149a37_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
1005bceee2f92bde51d74a72fd149a37_JaffaCakes118
-
Size
253KB
-
MD5
1005bceee2f92bde51d74a72fd149a37
-
SHA1
fb5a0ea198c564f2d992abbfd69e13edcfe71376
-
SHA256
1889971e72f1ed4b19d1c953a3833bdfede575c637bc93ac3e2da2b049eb3692
-
SHA512
1dfb7fafb40fa3257531c3b43693cc868f7b85b85bf4280c97e0819c758a195113ea1133a57f36e86fe797508a81d0cadee270deed1bd10af6eef2e6ecaa38a5
-
SSDEEP
6144:x4nDWgRAkPPudWDkqAd5lkdzwCMbufmZV7MhHFzJRBT5460TUK:cR3PPuYmupwCMyi69F1546i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1005bceee2f92bde51d74a72fd149a37_JaffaCakes118
Files
-
1005bceee2f92bde51d74a72fd149a37_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.textbss Size: - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 314B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ