�4�D�-p��ۜ_@wJ_�[ut���6k�V��ُu8����TZr5��]��?`�[����S��]oˮqgĦ��6��]�j$`�5�F�������4ٕ��[���E�M�;��֒/7^W�b��+��@?�ꖤ���IN3�`8�1�a��z3��ʞ�a�!v�]�g���)P����m�H�\�����N����C�������`��-�����fSs��.�xE����x���:�#Wa��k"�y�cT3>&�J��4- ���kV ����mR������J�H����P�e�Vv� �C�?%�@�g9�n���"ڃ���{gр� @�μ�����8f�a�� ���|N�}\u�w���ܚ�%z+����ؼ�=�@�woڷ�X�Zd.K%�Y�6���F����;���؞f�!V�]ǃT8����ζD���Q�tf�3x?�m��0��S�˂K�3x�����6TDI��Έ|Вl`��eMł�v���,�~�.��C{� ���;�}X� L����\��v��J�}���4v�ȫfX���qY줓3+?�`�l;B�2�?��L$ɝ�T��:;A��?�æ�z��R<�?�$�[!��C�����H�P��{ #��nxw���k)_��(���2�� ��r[�}&#�^�͘�J:�?�9o��r�<�$2����^ �p�)�SH1\~U�u��e�z�����٥@�YkEPd��g�S��{c����jq��)�yς��7x{�Os���e;�*/���氥4R�$C��G�7*V�G�)�%qR_�����L}u��rJ\�ܦL�J4���a�QZ(N�L�ϝ��9,-gK��G%X��נkZ���ۢ��2|~'3�L��1�^D�>I�3�q�ѧ�����/�H *r]%�3��7�8h���(w���n�5�LQ\���Y(ވ�DAY��H����� �n�ri�z���o�J05\��n%z���*��7v�_=�¤2�$GS5z����E�wJ ��a�A;c���ʆi_��]�~5�8���������[Y�<w:�n�};�.�O�V��@eU�C#��� �Z#��:6�gq�5��a<�B�K\$"�T���[�Z !6��S�H���P��z~���6��1L$�&���Z�;'9�!�<�=8����*"�J����� Zז�=��U�?��t1<>� �4^�'2���ţ�F�u�z�>5e ,-��k]�lO{$h(��|���<*M(;6��#X{�0�A��2� _�_������AW�� g ��e�����~_��"D{�O*�fz��w�;��ԆH�Y@-P,��Y��jܨS��>ܭ�6d�a/�x.���@rH��)"��}$�l��P3:й�k�7�A���TT���Qtޣx�.͆ͣ)"_bJT�I7ϗGr.���V�f��#�}�8�� ��AMH�����SA(5���n�Ew�a��I���'�.hJ�B?|�=r ��26|Y���ZX��)��?����A�d!T�' �S#�Q+ww����;l�,'R����fN%����Gs�@#ӧ��=P�eA��Ķ7k3�$G���)���zh{J>�Yd�������%Ɵ/��ZW� _�'��h�Y^gtЗ�X,nˣ߱A�1H��s �߂<��Q�ޮ䖜V���(��.xs�ʲQѳ�k ���{�*D����Ѓ�_vj��'3<x�� �_!�Łj)u���,�KTgB3�ES��x�Z@vDŽ'z��I�4�!ނ� kH��=�|�� ��Q��6M}�����G[([���q'�_43#^�B~�&��ŖUy0��:K��������9��7i|<}[Kfz��o˱J4�_����S�o�0�P 6ݤK���� �q���i�!#'҃zN(3���,��3P�%bף�ܚ��$�?:�W��i�l��(SpUh(����/}�rC��!7�V��=��b�ѭ�^I�Vr4N*"}�,�=����?t� �P���g����X��<���;��7�I�!\�g��{p���m'Wˌ���6��4���XV>R����mc�<� �$&"=��L���ѧ�֪������_���R�ೋD��T��Es��u�NB���E����8ǯq�=3�5J���8��7���w� ^����� kFi�I�!U�d<ic�%���|3W�YXp�L�,`������j��9ً�{�@E��=)�B�`�8¤J wWZ�c(t>=��r,J5���m�=��C�?�Yݛ2�e�E��ܝ��L{�_ѯ�"i� Ӛ�1�"�b���ӮZ���d�zJt%[)����"k�C�� 5%кz��w���59ho�V�jރ���#���Rт�F��Qu��Μl�̲E0�"�}I��F�uC8:��t����%;�,��6V?? �Q��e��2�(䴱X�m.;+m��{�!:,J ��W��!�����)���2E���@/�b�T@���Ȟ�;�3��JU Ck�M3��ka������ӝ^\j'����b��}�p��_5 )�nv�/��ԙZ�o��PagL|�v��\����ˁS���UF@$5[��R��.=ro���g���+���q�ߍ4`��7SBv����MWT�������(��p��r����p(B�6�f�����W�ȝ�4��rʷ�D�����y���g8����{I2Y������m�� ��ҧw������d����FD�к�&b����9���\Q"dƙXE���( �����!� �=��?�;�"4�ӿ���Q��+ݦ���) {d�$�"j�s6�No�W6�'r��]Cx�"%A�4@�����J� W�U��,�Y��r�����}Ɗ������t�̑Ќ2��Ի��g]B�UX}��Ru]�:�Pͱ�t��a� �we��CB�fw���mc��6��(����B�ڳI�����m�W���fʖ�Ι������NwA�Tb�?B��D#��b�Z�3���tA;�vY��հd���Q<x��Q��~T���S���.���K��R���Re}a�O�.�m{��� d_*#��#SPg��=�x�c7���4d�wmM����<%�KG{h|���/� LF��R�SG���J��ˀ5�Y��=2�NJL��9X�9�teѼ�4¾��5�x�H�K����x�"k,l�@���s�^��v��-|�u�+}�k�7���X����'�� �%��˴Z���>2����o�R�1�1�WgGp��@��|r @�T��{���i_�{� v���dI�`XX� .���[�?���D/w��e?�����13��*\�m�Y8N���*��r��6�ݡ"��/��ɓ��?*F�/����=[��d�j��'�r���̝�#a�&�F�����R�6��~u��O�y`=��;�|Vꘁ�s6�KP 8n���XO����|��}-[���#�9�B��Ϸ��9r����[�j�>��,u�A�|�8{h�ԡ�a���v>Nr�Q6s/ݾ{�"L[��%�y���lp� �C,����do��^���068�&�"X�L�#Q���>yf_F�Ѽ�BҦ�� ���ٱ#�Ce��9 5MƌY.�a���j���A���y�(V��*�a�#f�"8?��g���nv����grt�����0�)~ i�x2EwSz�6 ��%�Zo,Lt���� ,�
Static task
static1
Behavioral task
behavioral1
Sample
37514775ce8c353351766d3c63bbe20a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
37514775ce8c353351766d3c63bbe20a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37514775ce8c353351766d3c63bbe20a_JaffaCakes118
-
Size
4.1MB
-
MD5
37514775ce8c353351766d3c63bbe20a
-
SHA1
0c24e04e08453e5ebb51eda74fe703bdd010801a
-
SHA256
8682b402998f5069e2922a8cec15c4ab875a104c364366e02efed84cecb49355
-
SHA512
60e746fe63898d3640f9dba29bb49966c97060b4182b38715c3dbb9e556f5828d236248d467143764a4fd47ad2c195af6f801b315b20d0c6185f20aab784873f
-
SSDEEP
98304:uCoUst7FS9W07TERUZ7imTFMSfLjb4rsLwAYtEShShLHF/w:32t7w9vYKZ7ZHfbRL1yWl4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37514775ce8c353351766d3c63bbe20a_JaffaCakes118
Files
-
37514775ce8c353351766d3c63bbe20a_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 227KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 30KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 13.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE