�6�VF �?+[��p%���{����ze��ky`��^#�#n�h�#_�R't���u��V��=�����w��Z�&qr �����(�ێ-��\�@�$��}S�D�K�~T)E���lf-�t�pV�@ �m邲�Z�K�)Y5��~]�@Sk�{*���d1��jTCtT��qк�VP��p�G�f�������=��ܳ�d�PIorG�u9�i �?ڈ� ��f�5�J_�k�d�|�����ҏ}c�c��u�$����s��,+ّ� �1�_�!��aI�ɳ����C�Xx_N��;��u r����`J{�@�N��.�ڐ��R\<{F��4�8Dmz�"��hp�]���9���xj�R�e��̨����\����i �/�x�C���} �s���^�?�P�%'�Z# ٷ����zIW!��x���g6�1�_邴g@ D-?�J*S���e4_ؾ��ɍ���!��#�٨s^2öN����>;�-�-EL��k]az�%�� ��Z���3�|ݹy��� Cف{5�)XL)�$mbS��S���G3͞���3 }\,�?W� \�I�h���{z֡+*�C��DU;_��Ƶ%��6��o': ثv"�{�o��xy�"�8�$�t��:�AK�����vnǓK������Q� \�<�sLV]���4��+���6bD~=c�1� n�y�)�D'\�&�~.��e�IiK:6P�%Q���6X���+-J���|`Ւz�/5Y��o(�L�\�?���ȥ0$w��1�՟-�e/��7L��������Tm�ǡ� m��^!X��ƴ�����He��c��t��3�J�}~����Ý�����O83"�Ĝm _��οq�`fh�-�!�$�l~�8j����*�ޠd�I�h�u\!m!ʼ�ϳ� /�|+� ��9���1��4`~��j8!���s����BB.���l�H�Ϥ��;��-���TL^����e�bx��%0#$��bsʟG�e0#k�}i%�@�@�� 2�}� ��Y��s=>�T����p���[Ĥ����|s���E�9�d���V�Լ�>n:�����ֹ�*�Ɣ���X3�)P��<?m)�z�Z@����j|S�ڵp�3����땏� �g���Zc�zϣ��G-�P.�d�ٖ�r<*��Qv���B$G��q��W\B�.���e �!ڷ��3�4��k9��Xו�8�o�0���#`��2�� @�$�x����Y-w���8���;�AkVAk�,��~Md�U�:�U�0�a�e�ƝN�j�qi�s�BҢ�0�a���@� Ã�*@�,d�����=�.ʈ����dvK!OΆ��u7�I�%��L8�M�m�Ճ >nR����ޡ}$-�)����uo��T��YI�m����D�횯�:[]������/xN\Z&q�eא��i*/�$��[T��m�����7#b��/�� ��u���u]vw�i�����(~(/x���y��z�ԏ������VT�P�F�@ߢb*v��,�ԥ�Q @����s�[N�t�!)�ᣥ��e�����Â*�����]+�Tl�r�v���*������ۑ$.����"�k�tN˻��������z�k�n�JH��q�ԔmC3ߔ%��>�Pl.Nݱ��ҖRx����~c��Ai7��N@ϸ�n��0&���۠�/^��!�o?�Nd(�m)W�M��Q�G$p�9�8��.�A���_f����9˂�_��)���WM݁��O��eV�0VR���0�Pe2BԾ�{�HXкrSq+���p\ޜ���*or�s�{Qx����+��4R��� o�b� $/�(�2M��=���jL�����Jȷ���*^�A�!~�C���~j�x�v��Cc�AXa��nN��ܧ����9(D`JK;�CC� Cb1�����ngd��V������V���8�c��(�5XJʯ����BL��3����λs�@H4���9�% �ҝh�ΔO��=�~�p4�Po'��-H��&F���a�9��#Y�؍��k�����j�r�7����LJ0Y̟��09FA�%=B� �l�*�R7�E��� rc���2���FPvv��J�OY���^A0�}<\�r`ӏ�{��+�f����4������,Or=�������zhF�d]�]y$�� �V�V�����&V��4��N�'� nK���_�Q�Wk��j� ��]<���qK�D|���VQ������9�N9���u���&�7qG�Y����Y�����+1���+D�l��Ϊ�!ZA����h�J~��)��o����'_��rO����0�� ���1y_�)]��k��^��)�Mlͷ"ب���Ġ-� �Q��Ȱv�*��S��ij/�ן_R~�����2��3����` �TĄ�<N?8�=/;E�V�Х�p�Az���z@𥟕9s�D\n��qQgs��hͺ���X4^g@U`�������QJAP�1���>�Hr�Gg���ðr���8 ?b�|����v��7o�YYE=��Ƣ*��渉� ���Ђ��rɺ�Z�W�p�����6Ʀ{����7�Ik^.���ܦ"4_Ov��~ƨ9֞�����0Rh���)?v�3$�Ĭ�����%]������W ��L�#��`H�{Oa�sdW��z|xv~�G7Ci9�.u�� �9�������>�b`�j�m��9���p��m�P�,V��, �7�Xy����~�#8$+����jۺ����^$p����g���|�m� _�RHǍS�(�2}�T�����Ͷ���P��0{��}%����ړ�2����L _��_Guh����~�}�L�����f���B/PtI0l"K�D�u���g��NҊe���� �����ǠȬ��0��E<��}ī8_Ȁm��&�^���]�(P8 6��x@���W�{�db;cƊ�sc�1i)�:}�P`"�ՉT�4�Qyk7�R�ӹ<�M��p�\�,i�/������^�_?���[��[ࣆ����l;�钥X�L)j�3 �<�j��7i-�I ��G�R�#;`�X
Static task
static1
Behavioral task
behavioral1
Sample
24305e1b96a423365f6e0fd11fbb1af9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
24305e1b96a423365f6e0fd11fbb1af9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
24305e1b96a423365f6e0fd11fbb1af9_JaffaCakes118
-
Size
2.3MB
-
MD5
24305e1b96a423365f6e0fd11fbb1af9
-
SHA1
122008dbc2c3b0ca03cbfd0ffb074dadafae5b72
-
SHA256
9b1cd42ba78e8ac224131755763257e965edc6f1a8641ddfbd7153f93332c32e
-
SHA512
91e96ed9f4ebcaff61dd92a67e844c47a063d8e4facfb53155e01364e3e113836d69afbded77adde1a60f1ead6848462170bf5ce308078f186cdaf6900537cc6
-
SSDEEP
49152:7vXEJzNmq9zYqwE0mxOND1Z3C4ngpnInNWkRGBPUw0XhHMNh3DWMc:78pNmqFwEJYt1Z3C4n8n4tRk0Xhih3DU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24305e1b96a423365f6e0fd11fbb1af9_JaffaCakes118
Files
-
24305e1b96a423365f6e0fd11fbb1af9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
wvS5Drli Size: - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iR3yIa52 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
KWJe7KTD Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RDtOy2ha Size: 573B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zo1YpVrU Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fw0L7vWA Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wxC4uNT4 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Sy16YoBT Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ