��z�A�/�)o������{��������'cw����+�V�la�T��}�Wzz犡/0 3A� 7�=�� �R��}�k��KތI����s,5D4C�������p�Aez,V��0�G��,����6k���Q��Z81��K�#7���SYw��Ө�pEM� m�2��� �㙏��QV��;Ԝ�3;��$ǥ��*��d�������x|&ϾVS=����BglY��ი�{��lW�.�����6��/װp�T�����r�d�f̾r&�KUZ��X�0��Iv�w���pCm��@�O\N���E�M-zB%+�������ޣv@v�����8#\l�T��x��#w���9_���;�%p���v�E����U�0�u��E�eV��#����}p�z�nZ�R�.D�����G�7@�%�8�Y���I�ǘB/����)Kw� u��H�T2/,}If�����Ո� �Z�H�K��� vhz��c��.��߾͕Jk���¥�����I�c<l�������[�ܤwmLδ��|G'�� Cv��$�ٚ�b�����#�-�[�T��ݻ��+}ӿ���[��"���џt����N��:'v�� )�?��c$�d���2��j��rQ�����g�Ex��lV��N����(�oY<�U!�F�#�� b��!@`r�zs}��X+��8]dfCo�!��4"᪸�ݠj1��t@��a���TP�g�gjg���*Σ�!#r/]݉�K�Z�&���չ}M4o��/���z��Q������t{�ԝ����s�U�r�m�A�U@�Ppn���4' ��y)�/�EY�a�s&�������P*�AkX��*K�F�w0x� �zk�9�i��;�Y=�ʟK��u��HLt���N�zK�X�2u�D�M���g��4gj)�3k_��X�7���$���K6�Bzk:+�8�=߀4����!X�m�0MTä�4nV_���g�$^7+�A4����c��.� �~�'�J��n���f�:�^��>&���r�0τJr����'N�'�B ��]�K��b�8x�&28���\���C��9,���'_���#��^���I����hbI��0�b��3���w�;�A����V�_�h@P^&�^�q�('[B��9!C��q��b�4L���qz�l����W�>]b��0R���n5�74���t� *�?p��D���h�3�:N�h�Tt\�c�`>�"� 7� �}��%���*a�X�/��'�A�`Y3�ݱ,Xe�,#�|AB!V�Cʧ$0�)�H�vZ���Ӡ����/Km�[ʸ��e�.������]4�S��|��1�D��倀X}�<e�������S�L""�?�j���1�~)�i�z�5�Sn����ݛ1�M;�z@>U��1�k��c�8�uخ������-/�~��#�-��xQ�^�@�H�o�9�����R���hoTVV�e���鏣Ϩ;MLD�S[�o�[ȑ����fb����tXB�-�;�`�O��!eiX��-���:�҇P�u��!����lz�O�1 �1�)ؑD5�ܓ�>��u�͢N:���`Q������K9��@�z*�^dE�`=�E l�bY�t3)���S�^�B�]�X�o.S��i�3����'z�����L��g��t���`�V���Mn8���驙��W���@k2���&!�w����z�ct���V��Ԫ<�<E�� v���f�����l'�Eˤk�����9i�U���@�&F+j\���OÑE�$��D�r��&�}��'��ª�k<Y���T�ذ��衙��j|Ϛ>0�T�P�'7x(l�5��"�+֙!�� %8g�$!������^}@��b� ��P��հz�V�����;`�7��m��J=fW}���% S�섿v%C �R_>���w�/��vD�O_�etΝ`�����r��I����h0��I��/woߎ% �sD6/(β�����d%�64T����߇z���gd~\V!&[��KO�pu��W���/�T�]�\ 6wSË?�U���lZ$�r�G��`ܮ��*}������hs#*���)���t#��Mp�Y��0�� ��",��l��x�d���7<`%45�f7t���P��b�����R��̏��$D�E)��v��h�V��p�ڮ�`���h�Q�V��ӏrͫ�;�~�Hlol������Q�%�~�������cD �*J���MU�:�+���bn�����#9�?�R ��^U�_����J�a�U��S��U�g��LS�`%I�Z�l��x{n������A�HT�u�q�������y�Q��Je�U_�<w ��t�D/�M7^�^,��kAl�� Di�m��J�M) �t沥ߑ�b~=� �e� x����b��[��U��= t��"GD��0�L0���RW��^��7��Mi�#��c�"�����qb�S6O��o�X��&<��&��OHCDF�[�2S*|��%�cnV��;���#�K? ӻP�g�K^��R���O\��P]2Nj�?[��j9N�C ���Q6*=�+��⤒�}ڪ3��)q�R��s���99k,:�3y�=��Ѫ���^��$Q%�'~M�,Xm\�$���䏸<�Jx���Oa�� [N�S\��<$`���S৳�:���G>>�����eH��^�5�m�[Z��*,����ٹ��M���~���| n�l��t!ʇT��[���@��yC�/��� 6k�j'@ ���I���4�ڿ�d�SBܯIuQ{Y�����fy���*ރ�����f'���3�c���`!�j���+C�w�dmx^��U1��j��-�:* 9��|�����+�[ k#�,��%�[�%|���jz�lc��v��q�AZ��~��Ʉ�2U������⪬ôę�Q.�V��Q��Wz�f��<��]�g[.��э���7K�5B�ɕw7��������=����_ǞV�����o��-�����;��b�X�:�Q�"�f��u�U�k�b!��y�pk�4)��h������� �mM���^oL92k���R͘}��L�C�J5��
Static task
static1
Behavioral task
behavioral1
Sample
1982e12c70b44ee69a195c4d8d4856fd_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1982e12c70b44ee69a195c4d8d4856fd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1982e12c70b44ee69a195c4d8d4856fd_JaffaCakes118
-
Size
175KB
-
MD5
1982e12c70b44ee69a195c4d8d4856fd
-
SHA1
f282fa86e4c9988fb875b24fb8a2928568b03db2
-
SHA256
d179f8f13070aa7d47d4fe4fef3534cb6f1641c87f863b72c1406fc0e17ff2fe
-
SHA512
afe8b275dd9eea996eb5b3c95312d86f0ce334b63702a180a2b5bb23c8faa3db45f89d10f265abc8783f9946337aa4d3fc7e4ff2f8b99c52bf9d19857fa3d8df
-
SSDEEP
3072:Iite3yXuu9Wmts0BwavyW8C/oECrvfWzkRzsMD1H2iyki7g:XtXXuyqaqRCwECrWzgsMDZRziE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1982e12c70b44ee69a195c4d8d4856fd_JaffaCakes118
Files
-
1982e12c70b44ee69a195c4d8d4856fd_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Silvana Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ylsq0 Size: - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.ylsq1 Size: 656KB - Virtual size: 655KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ