���֤����C�G��65��F$� �={�@��)� �"�xh���b���)dZ���H4*��xJ�_���&i̕��^Ix�Sݏ8:����p�=�����X�ZhX/��kH��x�:���\e�01t��ҷFW�h�oH};㼾��FO�����{�ݓ"1�&U�;$�p Ol�L��3? U�e�ge�t��&��=�4�VM�(�`]#��X[Xd>�q����Y��s#mQ����~9|��Q�#4r!hQ��T.�6���R�=_ubq��L-D,� ,�N��䧋^���Z�t���Ԏ�E�ɤ�?k#�'��g6�vL;�,Dx a�H�n����@�~���(�Q��m��(�s�-�f���U�.#� L`9��K���;D�z;���#������n1p8�7�\Y�`��f��.1� �g�N`a(9�0��X���ҳ�����Ys���2�<r���q�����7!f*�����}��������4s�`vp�������g ]�Ȋ(6�˔�^ɭ�ތ��X�ε�2����s�&�{�#������a6�h�, �^-��`n� Q�lڹ0쉐b q4<ȱ?��t�C�YP�j�!�n#� ��n .a�L�>���kq�K��Ks�F1W3�-�2N����<*��K� s ���t٪R4 �2L��F*������K�$���(��䈉�z��0�o��8���J�X#��j���cahM�t q�`������v�����A �?�m��ߦ���WjΒC��Cm��d��x�q�f9�{1����{U|4m�&�?���/k��x�LJ�DgF9�M��@���.�e)��@�Hv��G8�S��8d�e�B�ὶ^��rnY�rw���f6hVa�I��y^����Ǵe>9�nO���w�M�Y�����ŵ!^u��\P��Ii�ܮ��jX-@����C���w<h��G�b��OC>�{p�n��0���1�#r�Zmțf�*>�#�� �i��U�S��W[�5C�` ���b�6dA�����0�EA�����C��^JI�Ҷ�S%BCw�/4�Y�KK����}6����}�n��S;���E`��ڒ!��+���"�� �,�A\ ���j���W�ߜ���4�eC#��7�.iSh�s$�bZng>��l�6PJ�{ߑ�T�E��F�UzBv�Sg|�ť�.-��D����XS!*�L���Oq��b���,�/�s�$�� ٘j�G���~&���Y�;�7�cE?~R��f��)�Y���РQ���9 yK�1@Q?D4��Ba���M���y�X���w�O ��sdU`+}�U�Ns\��oEIJV�ǥa|�L��ǣ�뷻ժ����FX�R���(; ��Hئ �|J!M���*�k9�ɺgS�]G�85Z�����G�Ȉ�q�NZ����r�����J{wQ-�i�EW��#`�8XII;��r�e�s�<s#����*ޕ��aF�GvJ��˼���߾3�t��4C&_b�f�-�������S�"�&��/��<���O�����E;R�Y��?J�9+=�2 ��e�5��7��~�t�����1� Nȳl��a��s�Vc�>�a=Xo�nzU�F�������sq�ù����.� ����/u R��E>ё?�^�ey]�1���m� �1���������ꯥ�(�Ր%���L�������<*�p�������ʈ���s?7�}�=�)��9�"���r� xNc�%���%m]km�F�Bi<�<�x8�Œ���n;]:\�y�p9^������'��}� �6�q����l�i�6U���L����a"��dp� �k-����0��f�X� m&N'a\ۇd0��ƙ�'���ݚ��Z�w�w�0]��&��������!�]T5,�Ͼ�١�z��za�����p��փ��pyÃ2�i��)�֢mzP��$�u��.�(�}�����ȼ���a��f�z������}H�X%��[]�s��0��#g�z�grt��@�S-k&�STC�_�{���Ej'�A���*�lNk�'?*4F:Rr�|�B��,���]��|f��Q�\E,���{;�,,37�5���n<@W(�s�^���`�����ھ���0ХRZ�c+Rv2�꛲*�(��٠/:��QXw�q��C�Z�7�3j�?n�q\x�kg�Y0�r������vSs��Q��~��5�d�g�(O�v����ocB����2���6�����qj��-yX����tE�mGM�rn�����`�2�)QF�?;�T{+(�A��5�����0X��t�>��z�J�f~��p ���j�ԍ31����'���Hc���O~��1l��~�y���M�2���~l�m5A�����i�k�s4��x?C ��D�n�tT2xl�V@8��qY�/�x'�6�=�{L����������Rk�u1�H�l'w���p�?93�z�� �����zQ�0��W�3�&ګ���!�)�>��B����}9R��Y�F�E����n>���P/Gc+?�UZ��"3ʹ�~$*��8���Ř5r��J.k$��߂ ������N���{�*����^��2��Dk| �3C<o�-+'�9tN���ѓ*Cپ��M��a�b"⾮��#�C�X¥,�9� �Q�������N�����r� ��t|��(?�b���/��B��ϟm�gׅ���Mx�a���8��i��GWq�p�V����r�:��YG��[s��k.ڗt9إz�?�sO��T�@+!m`{C����H���q�8:��i�H��0�4]v���)�������m,�6.�:L�}t̝x��TJ�ݻ�K�c�KW�?z�)�Tv�݇b���9d�]�_G�B��8����I7�F�!Y.�/����<ϔ�����e >������9�s4��2��_Y���pݳ�Z�@�o-]�QR�X��ӱ~�˘��Z*��j�r�]���n�V���+����ӺZ�`Rܼ�������g�f߅5��K�岿�y��@ί~Wj�煙���a����a��;���F��G���`Yu�Ρ�]*�
Static task
static1
Behavioral task
behavioral1
Sample
346342ccdc06935caf56ac52c6963a95_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
346342ccdc06935caf56ac52c6963a95_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
346342ccdc06935caf56ac52c6963a95_JaffaCakes118
-
Size
890KB
-
MD5
346342ccdc06935caf56ac52c6963a95
-
SHA1
d2c1ec6bfc678cf9a45aaca6b88fdf019c74c6df
-
SHA256
c8a99e1011b7e04a0e40aea7086960e58d604597077f96d6312adb53bd91f0ee
-
SHA512
60f63a7f486eef6f794630499e26599b57aaf0f210f5dafecf75124eabadd0dac4be7063b82ceb75f9ff2d33e37f1dbc7c98071fb889c015558873ce6553b3bd
-
SSDEEP
24576:F2figF1EyZVpcS+ngbRb2e5g6X9ikMOsC7wI8y6xa/i:TaVpcSg6NidIwNPaq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 346342ccdc06935caf56ac52c6963a95_JaffaCakes118
Files
-
346342ccdc06935caf56ac52c6963a95_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
XY4S84Xx Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hvoQBQXp Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wy9yBNNY Size: 864KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
x6e2xBLu Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JdBfg8je Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lidotOzz Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uXWM0OPs Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
YXeKyWCD Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ