Ij��T�I������2����X�f\,5)�U���VwV�+[˯O�;�>��6��<v��J� %~(U��6ie�*>g�2B9y_Y��5�T,���R�$jV>B�Gn/���'ܸ��h��#���o�ִ����B��6�{���Ɏ�Y�s-��-������&b/���m���(��'cTd Q5�lׇqP�)XNP��W̋*3rXT�����J�;Y0���U @G��K��wr� `yB2�.v#�_��J<���2�2+/J���i$��H�nZ������jhƩ��&@��=��xSBV����G�3�1��B�}�,�2-�@�5���R���QsL�R�jz��L�%_;�t��8�h���Wh���HOe������*�W��pz�SJ��'��o#c,��\��z�8<���0pʤ0��)��]��q�$�� ����ӕz?Uq�Ӂ__V�[*6d� ���[=���9Hb��"3d��`�}q�`���̿+��+��?�(��7��I�d$GC�����À#�{��d���<k�����U{OKwR̂O��xD�f�6���~A��{������2I�i$b @.g�]5bjE�j\[Nۆ�^w��4����/n�`����S��!�;�����}x�@����_�5甸O�4�D��v�k�����3���5��6�m:bB����x'�7�����k��� ̦�"��r���r��L��?���,�@*Zz�#�n���Q"w�M>��T�Yc��S��c���O��E)Y��X� 8���g��z�R��e65zB5�Wμ��o� ��T���lܻ��`ah,�S� ے��������4M��R�8cu?��Kn-K^��!�W�=� 0����5Ei���7����;���'t}<��.�\K����H6�tU�*~�+�9��� T����誎�|���8�۾8���Zߤu�����,j�]�2��\��'{f����F(7���汽<�GO`"�.Ķ��^�7���ԣ3� On;�T��MR��G6�G�u��í���ל7�*~�̋`�����hB��Sc� �Z>u�����7�<;�C�sMi4L�n�JA���o˸f�0�h���I���̽���@ǫ�觔Z��m*m<�I�&x���/��jܛh/�d!��I�V�R7��6��:�"��T��X�r!S� ��˟Vmفu��pW`�v���UR@��xn`M������]���K��(%o�5�ԓ4'�p�O��A.F�~�Y�bt�pU�~N:���|�y�� ��Ӄ)�� >��' ���k���xu�}������%x��|��j��MG�k*Zi\P������[���Ēy���~�zUT�::0�K��S��;�7�%��� l��a�E����#�<-K���"�N���dor8n���i/��}����UC�#��c�/��8��r^'�C�ǟZ1�d��EOT̊&�Z��m�-���x[s�NQ}�.<Yy��4k�w�zft����u}a5; �#� ��N�E�K�E��s�w�d�۷Dm�F%I�#3A#Kpr���x�GF��s��b9@2��+=�<���A�<�%��z,�G;��i�����]h�z���dR1�y��#" �P��L@�Z��z#�9���p1�ŋ�u����4�`�1����Ou/����X�Z���,\ʚ�y*��U��_��������`:���H A�_o���>�D�?�\�ĵ��!U#�`��0�P�� y{��$�~��_u�{bJ��l��Ե����a�S�Sa^�l��-�RxJ��()�Ĕ�t���7�&"��J�WIЂ����"�N>����1xg�7�|�ކY��|'��C#{���U��H(p�7�"}���q��h'+#qd2�4�t�V�J�*�p�Q��jf��e��fҼ��_����)u�i��&���L�"EQ�}GٲO��7�R���V}鑔M���p��/�^�t��,�7�5��d��� ���AS����Œ�������D)oj:Ց�u��;���y{z��#i����=S�bg�yם�!p������y#3 (9z-_.����Ǧ/+3������;zz�G7��<sUO�3�b���m�n�6]C��I�昣8��ԘA���Թ����;���H-�8��`���;���; U�r�I��7p�'����zMYD�u��Bj{G:d$n�,��M+;�z1e� ��`�mr#�WT�a��{,�A��P!���gv�� A����5F�Y`.�ȕn���[k�u/�#��[If�c NM(I���f���s���p;�,0j� HW�d�7k�Õ�Q<��p�/�f��Y�^���/9�1T:m�o`ct,%=w�:H��2/P�Ό����8�~F��L�k>�,Bq���FK2&l�T(}|a��8����r��7`��ֿ�R��ݨ��g�w�B|e�m��:xz ��o����U���d:ܟ�L\�Re��_���d�#DT�Za���،Q�@B�q�- M?�b%�K�n+t���䚹 g��@EН:�7y@��v�7u;$�����)�,������j#�lN��^m��e�5H�Em�~���SU����0Q�n ����ngxH��BJp�3Ljs�kh�V)z�s�0e�����b�����>)t�� ��_����A�y�?76��Z� I�^��{v�:u���<oK-�����s��jksh�4e�9�2��|�E�(5�5m����Rpq�F�f��S�{�联P��Z ��� _�]��P�P<֤��<&� ��Y����֎��/ `v�eT�5��|r Sʣ���i�����ā���V�k�I?Ƶq :w�s{���ज�����}!��՛���n��NL�f2`���jM�.��j����0V��"��ީ!V�I�!�N>!�#��h^FS�j�t��x�����awy{(7��̄��ҟ�YZ��ޢ+$�;m� ����!�L �q�IR���T��:�����R��Dd4�h�I�����]8ɻ�w��n����b�%�~�Aq�( ��wv�h��c�,FKʙ{M2?�f>�*Z.
Static task
static1
Behavioral task
behavioral1
Sample
3f1b728fd89568928b51c0d17a959dfa_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f1b728fd89568928b51c0d17a959dfa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f1b728fd89568928b51c0d17a959dfa_JaffaCakes118
-
Size
748KB
-
MD5
3f1b728fd89568928b51c0d17a959dfa
-
SHA1
d020136faac9e93122c2e6293e1aa26c1fd69216
-
SHA256
03cf350ccc1cb4be5dded6f4cacb32f29ff62e3da231d8966787309b1e90bed3
-
SHA512
a5df0e09ded5d1b5d45b37c33d65619cb68034c30677a8ff5d89daff2189611c534a45e64343ffeef4450a367b1cc7c4f17e843501f6a7e0564ee751dd2be875
-
SSDEEP
12288:s/KU3PRL4tADyLHNVNkzArPHnnW0FNadTzEbK//PALm8lBAmWKTGI6mQIg5ecsQG:sCnuyZVKzADnBFE5EbK3V8XAmWKKI6rg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f1b728fd89568928b51c0d17a959dfa_JaffaCakes118
Files
-
3f1b728fd89568928b51c0d17a959dfa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
5NjikboK Size: - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3lnswp6C Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fUL7xMiA Size: 716KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
OsGdLNFg Size: 264B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lRcXs70K Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
6TWMUgtt Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jw1cgaYC Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
wjq91uya Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ