@��q�M,d���k�C�7V� �������P�P� ,�G����%�pL��.�ٲ��Ct,Lu��spĊ^��kID�a����j��8 X:�kw� `^b��᎓���m��Fߠ���3 ��f�I���Q��.�&u_��dxCG־"��,�"�t)䟧KT�W�;���4`��,�r�3H�;3���s IZ�W ʦm�B�]K���5�dA<W�K�%� R}{��WI����w8#�����2�gr�O. ��A��5��y�&��9���4�����5l��[ݏ����3}P*��z39�L����X��qÙ�2�gs�ue�W�۞�3� |��ǘ���1�wvCa��"����M�}`��?��a�W�1zZ���B����}}o,�H2HE���j��jm����j�u�Kf��X��!x�~Z����krt�9���Q����;��kxw��@��S��π�T�e׳*��(�4����|ܚM��F�Y)Q�>�2̚��:ۙ�`������� �� 3��K���Jq_��V����}�/������>MWv�Yz!��;%>� g/'X>�\og���D�H��u��t�����FŒ�k��Am�rS�:��#��k���OI�g���.g�vG�E|ٿ��j�D�#I������p����kL�a+���v�.���s�y�l䠴@Du�R�b�^�ԻS���~j���@��@���]�Y9]��P���(��#X�"ee�7��;�N��� ��P\g��%��ؖ���*?i��$؏�l�N� E�a�A�d�nuo�0��Dm�疫�a_�!�b�Ȫ�XT�'���m�U���H�g�dg���dR�I�nZ�B�a��c?ͻ�z�i^��F�X��C[����������+6ʰ�.�zD/�{���a����z�/���Ru��'Iz( ����h}�}�Y�%�>D������7�!LD�3�OF��Q\-K���C�YB�lfɱ��j�����+C����ٻi)�ՐW2����@,�<���Й��ͩ���2��)d��ґ�K<P��YԬ�ٖ�0MZcS]���E�K;y�X��)��.|����Q2��l�nd9��~'�� �����$�N�ߎ{�A��GH�q#˞�N)��T��g�� K�� ~�Ml�S��������x���3�?�f� #3d�yO����>����~c-��'��`�ɤ�/���&��ב�9�������3��$��n���R������:��U�}ٛ��~�o>�D&�LMZ�� =������ݖ��N�Z�q�9r�7P�ҟY]���� ����i�W�VBš�"aQ<��R�O'�cs,�6.�G��5��4�2i�������β�0��c�����&Y0b�X%�CM�w� �|��>ŭYq�`��訩�p8�[���tK������� ���a��&5ͬ&�z�e�?y߽��2E��Z1�n�&���uwp�2�4��ǥ�O���>A��)�EQmڌX)������Q#����V�u-ǝμ!��j��`�h ;�녉R��ze�~Y�������L�3�vY!��;��d����붓'���2zpL �� ^��8��$8�K�#�5����u�ɯ�P/����%�F;ʜ��rf9���A����2;/!�Q.y�2���y0%@U��c�b�w�+�1��e��K�(�#�\�@$�2-��� �5�W32,�I�+�� �2 ��a��� �4��n8Aܼgڅ��@�f�t��K��$�Ѡ�/A�mQ�-��؝_���2�����E�[�������$-�`�ā{! �\����7G ���Q:��hD��`�T9�\�������;�$.�8R��Ԟ�kN��-,��Ԭ�`o�r����E�Ϋy ��"�+�"xb��+X�?�c�#z7f����AHgЖd��#��ְDB�wҐm��;cO����0)Fg7�O����P��I?F�#{b��!twdx����Ҟ�'�Vc�����bce�#�0����i� Oxi��X��ñ����~i��Sk*<�� ���ڂ|JL@�0 �]&�;����+�EI�K<jm��� tY���M����غ.�ˈ9�銊Y�ܔMZL�����~��/��3�5:D��\��$S��{-���ԙ���;���ydW��P�e?��߿��u���.���h_?u�LYG�^GJ4�mS_t�A$�S�Dė$ �a��0ԞjeOa6���y���A�x�_|n�_u���}��� ����w���S�o��"���)���*������k�g��k�d���;%n��}�%�6��4�!�R�ؼ>V�P��0z��Km/�)Ɍf�:��E�w/0�X����o~Z��������������b���w*�ɴ���_ʒQ��$~�3����=��T)�HzOt��ߧ�Xt����cJ��C��_�;��ҳ���N씵�^�ω<ݻ�5�%Y��A���<��/P�� ��Y����J�-Ӗ���jR��چ��w�� 2�o�CbF9ֺ��%m�<\����ܹ�mم��t��C0��sgS�#��z�����Mr�3;��{�W/ #-���4)c�̣��a���QOG�N�������Q<�sl2O��)�l������Ҩi��S��GƤ��Θ�4���N�}>5=q��4�j��7���"�K�Dz`��R��,y>��"�+��9jO����^.)��J10hEC���vg��[�i��⟢�&�_����/��A�B�F�E�����9}q�P�P_}8i��ܷ��2���1@�G*�� ��)B����ዉ��!P���#m�`M�{�X�<�}(G��˛������6�t��lԪ���y����Jr�g������3^a��{�V�=����!�;�l����Ζ�R_2��擼g�Z��-�*ɶ�y���E��]�\|w�n�c}N��O����JwG���D�Npۓ�r�g�MGE� _ϻ�����w������b;� R�c�72��I��z�TDh��Om�� p���r�a�c����.��RsWy�a^�x��)~���K�
Static task
static1
Behavioral task
behavioral1
Sample
27d90e32237220ca156aafa07ca65524_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27d90e32237220ca156aafa07ca65524_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27d90e32237220ca156aafa07ca65524_JaffaCakes118
-
Size
908KB
-
MD5
27d90e32237220ca156aafa07ca65524
-
SHA1
fa3a3cb069589ac7c86c6b73c3b462b154495682
-
SHA256
b39341947ce6120d4ad454de4d640c6c19b83beb97c4a95b2a9ad7fa2cd4af82
-
SHA512
20b5a5b9024d9f7450edb9f83d4d9c27a846b9bfc4cc856a15a5b19e020438ff532f8e91621565ec28809f902d730acf511afedecfaaf4287fdafeaad86212ad
-
SSDEEP
24576:wt2YlrBfmgZM7R6HaBKDT506i4K0Px372sHDbc4hEijqe:wt2Yl8fMuGT84K097dXEijZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27d90e32237220ca156aafa07ca65524_JaffaCakes118
Files
-
27d90e32237220ca156aafa07ca65524_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.textbss Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 860KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ