9wp=��ܦ� � �É6��*�k��Q�.dx>~�Cمw���Ԉ�B�#��k�Po=��p���*�ȓ _R�8^d� ���$��Z�!Î������5�WWB������m �i�T�e9-�����)t�·�S{H�����dg*��h@Hj�ti��'L�$��Rf��Z}������^��)U��4T�Y��V��5xʎ?����>i�9^)��'�b,N�%D�MF��=I?�F>��r��\gg`�5���,��@�E�ٗS�~{½G�����ڿ@�'��E�I� ����0.��}&��Y`1��S��Mx�n,���= ��<&�;A�80�՜��,����B��|�^�:��?Yx�ӯymEi{��ɠ�������b�;\������ж��똤h��(���/7��~�=�ڜ< M��<�&��r=��~���F�x����C� ��ĕU�h�����0S9sKI��+Pl�3���c��=ũ�95�Zu��mZ�J���+Z��SmN��X_n��xFo��%�r�<N��BL�L���B�5����<Z�v'��V9�;��\�q �����S�u$�eG���Zu>��-��ik֘2�mQ��^���6g*j7��*tW6'��_��(�n�� �����GT@�料�@gȯ�e�&����$�=vY�$�V�f��4٪zS�_��T�M���p��yZqg��s^��٦;���E�2 N9Ƌgԋ}���(��UFT���j�m#ѵdg������7V���\�j���I�U$�V�]�W^ͳL������F1M��:�����T���ڤY��6�EOvV�7HU�,��ʝ��m� �^��1ۄSyƟ��Ou�cf"��Gf�T�ԇ]��\.0q��?;�r,RR`5��T��nՇ������gMN�b�g�τ�2�|QUr8;;���[0ql[ �v� Q6*�[��%H2�܃"p7b����x�>�̉��(���0��>�)�QA�?�jAW�����+r,�*Q�BJ�](���06�D+RX\yc�f�ĺ�؆A������ ���d �oO� �9����N;�E�>�e>�����)�J�)�� Px�5/a����� ����D��7���K(mg���hm:u~x��'9��M|���8{��a�]HK��������Lrn�s����'�nl��O���:hY����&����E�D ֖��ƭ�f��6l� ��7����j�O|�P���0���bj2ۜ�Kǚ�8����τJ-ʪT ��*l0*�9i\nM���ā��=�%)U���3�$o7L��;Z��cہ8ީ}sn�Q��-Eܿ�������� ���ǘ`/K6�m�IeOTx�'��A��a��`% ���}\v�$�� ē њc�́�� ���_�8Ȍ��o��k��F 8V��~+�Q ��@ļ��N)�R������7i,�.�t��zcy#�nߘ���q�KB �0���;\�����l�T���^�[[���/�����1�$�J]�B/�Au��f$ʅ�y��o�ϖ2�4F��n���H�+Ǧ���˼Z���p��l�{�R�kXK)".@�ם�^5ڱ���<W�r�~�"=�Fޠ����J�^Nz��cQ��c���MH@y����+X��{o"�U�r�<���b�qsZ�A܀�:�>���9�lXm�ٲ��4����xS�q�-c J���B�@w�GE��V�h��/��eZ��42�0�8G?�v"�ℳQ�v�#���LG�W�,&{�G>�]� ����R���p-M��)�VgVX;�SQ��ތb���M1աr��X�s��P��қ���Z�����φ1t������df����4��i>�� W#�s�3�Z3�3�IC�X���d3C\y�0�*{�C O���E�x�v�D����P���O��y��6.������ۓ\�������o�� w�=�*X:�_�1SDFC/D;n�K����:�>�f*.yTQ��S�/'��أ;e��W�t���x�1�R4� ���"��y�}s�4<��,X�K���d8�`��-� �H>���n��4:��$z�H6z�,��+���_�W�Yzy���Rl��?4Ĉ/j_��a������bS��걝���[40�u���j�t�,��T�W��DF���m�_�H|݄$�|P��e�F�갓�9�'�X�[�g�qo��� �y e�f_U�����V��&�)2��'pu���4���hٝΘ�t��f�E�R�áܮ7�X�ΚkM���T�����݊w�_6Z�q�A��j���5tJr��Q���_�/��M���sC�ʋ�yQ��n�����8�r��L��Fe�f���]%�`譥Ŷ��%ⴂ9�י�i��6 �� ���� ��ﱱ�j����V0�a{�d�ea�KS�{�����@�)��=`DUWt}�_�|�tE�#���o9sy�\��dWJ#Q]�M�XO�m�ı��z�`s,f�t2tf��h� �Z}�z?��V�2��L�����S0'�On��O��� z�Ei� =zG�F�%�.[��y�� �߅�?�↹����������0�ҝ}��Z[�Sp���J�ͬ�q!��8d(i5T�}P�x(��_>D�н�d��U�R����G�/�D&u_ڙoS5��8���g��&�wF��?�S�L�!}�+e�w��G�� nUh�4���$9鋴�U���XըpR���5�ie���7�Ҝ����;G9' %�j)|q���X ����z�s� �K��no���te��k0�1�����';���r����Ra��6V�������\i �-�(���co �5����K������*�m۔�jQ�p&���e��ʯ��s��aoT��B�~ �վ�F8]_ �>�*���7�ս1����K<S���|��A�m���uJ��0%�$o"��S��l���v�G�P����I9V��@G7��5�t7�jl%��0a6G���i/�'�O�|{r2��^�?�V��ϚN���Ej
Static task
static1
Behavioral task
behavioral1
Sample
3a0aacb2a52889a386f33053a7b8972f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a0aacb2a52889a386f33053a7b8972f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a0aacb2a52889a386f33053a7b8972f_JaffaCakes118
-
Size
728KB
-
MD5
3a0aacb2a52889a386f33053a7b8972f
-
SHA1
b4e794c533197b98a59a510eb4a1207225e0b249
-
SHA256
e65ce20392522cae1e4f0076e8807e0b4375b84b13f97f34450630e01b401a1d
-
SHA512
45f373c13915ba28e6279447312fa3937d177f72938b1186b0a71ae2985c15c71c0a2d1823ebe624e808ce4f3300166ad5998f5226b4eba3dfdc3a4d074a7884
-
SSDEEP
12288:U385/KzZtabJ4Oq37KGwoaIVFdt3rWFCKIQfQXc1+VJjt9G2ffbAvmyo8q0iLN:Us8ZWKaIVt3rc9+V7Auyo702
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a0aacb2a52889a386f33053a7b8972f_JaffaCakes118
Files
-
3a0aacb2a52889a386f33053a7b8972f_JaffaCakes118.exe windows:4 windows x86 arch:x86
b9d2600aec50c8faa5a65b976e72ab15
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord662
user32
MessageBoxA
kernel32
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
Exports
Exports
Sections
.text Size: - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 434KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.se0 Size: - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.se1 Size: 716KB - Virtual size: 715KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE