C={f,[�@u��M��?C{�6x�Vu�/쾅���Vh:�{ޑ:��U�V�=~mzCsşz�`C��Ƴ�讼]+Y���:����U������!E�pq�Ĥ?��7]�O=�"j�`e��?�*��Yu�Y�rЮ��,Fn��gX�n�r$�����1��}~1ilޝM�&x$-���.sP�2�*c(��{�x�*���Q��]!�*�k��~m4��y�t� ��ޣ�:8�����l6��S=�+[M(n!���}4�wA�rp�9�Tk��e����Y�R�Ϟ�!�5p�Q�T���.����D��rN�c\�D��2�����[���+Ir��Y�{s���-\����ך���1;��.�PQ̈<H]6}�w{���Rjtſ�Ӣ� ��U&���Ωu�d���d��"d�e_#fN]K�Za)J,�1���Cڐ4� ��3:�Vǁ��>����=�i$_S�a�V_��lR��I�:�!��T�$���D.���V_����'��8��G�dL��M�,ơ����6�~ב�"J�ceyìk� ���U�1����?u�/���I����pq�N����Q�RS�ʓU�ȟ�ۆ�t=�����L(���7V���=H��*�!���+ʜ����_| �8o�Ϥ1]m��ѧ-?�E��]��ōD&��9������lH~��ۋ�RLA.N+Yv�� ��������D ��l?d��}O"�%�X���q�E��lm�����3��Z<�6&��&2L'v�Vѡ�;���A��U�9�3����=gǥm���aG!��g�P=�,����瀾��Ρ���ˈwo[��3uߐ�j��ڔ��$U�a��q�lR\U�P+�[���1�_ч&sBM^��*b��= sŤ����T��}���Gq�p��P�햢z�w4�6�Bzh�-`�F)o{q^69?%�;p�e����A?�5���r��?�Kd��*�kY�>�c�L2A8�y"�RtcG���S�pڵ>3�%,OV!p���� y������� tf���N椮���T�T�b[K�+�s��,�Fw�0�^�c��M��xD�w=�������'�ߴ�~���Ǩ����[��E�m<[aNKbFV`���1e1���P��80���{:�3'ł�Aj���6\�k ���4 ���ld�Z�L�L�2��Q!8 �i�gY!��XO5���m4I��������Xg$�O�Cs�xC?��6�YX� ;��O�~T�qG��gj��8� ��g�B69}�E��J�����eK�n��G�,P�������Ym�N�*,���ՙ;���!k�R&����^-.�01I�T/��}f�\���Z�������]s<m�A��7��#�vsO�w�Ɇ�@*�g���6�#k/؏��� �8KQ�7uD����ų� =��p3�5�3*����:�o���A1��l���ZD��T55Qt��~���g�I�e熳*�!A���c!k�?J3��4�YW��4{#�Z(�(d�*n��%��ۇU���H*����H��l���c�6�~�ņQ� W�@��~ 9� i0"E`T"X ���0��1�̋�M�H��77?�ʝae������ڮ�͐(H��辉bsI�^M.z�)��^P�~i���WI���k!���ix�O����F8����K�Ny�*,N���*.�+I�<_ ��u�t��u60k�� ��ѬG稓�A�v���E��Uu�_]� UyS��=;T��'2C�&����7'�ڇ[t@�E+�l��!%�_��$sʊ�0���4�ՓLXێ�1�t4��� I߂#,�+%��}��^q�%'�� �&5G�]}+"9tEQ��h�6c%)��o��P��ڤq���-�R�⠕m@-�g�f 8�9�6J"w C%����g@ZG��RY�Dr�Z��UjR=F�E����<�1�������2(���ı�L�7y8�5��=�j�*�ʆS�!�߮P�;V�Ɠ�u K2���)��Z1�4X4>��^v�U\�N��'E�zޫ;���� [�٥#����DFa����#��b�����=��N�x��jI,� ^*3�&Od�qi4���/�_�*���ů��� s���1�VZAj4�ŮA:�r%L���W �,KB@�U���?~�<���?:@��ˌd����z�̵B�2p�I5��;�_���n/�Ɣ�:xQ2s�^Wm���J����4���8oI�S=�}}(����ߋ���9c#�Ԁ��7TU�T�i,1 lg�Hդv��wl�WTn�7���B�N���6��f�^'�3�7�'��,E�"}몕wP���c6�.zfG���z$|�<�ӂ��4㼸Z���bx�y��P�R������>�k���R78��7'z)rlelpQ�f1���_�R ���X��-�.3�Op�������[�3Z&y��P|��'��L�{5�@E�lq�)���8�2e"�u��jot�Y/���n�NRogUk�#�^搼�M҃�ls,by��Tq����� ֫4#qVr��ȳ�Pa͓�o�r�!��#5�}7�,��f��w��?�k.ɨߑ6��,�!��,���R�MU�Ŧ�ѽ��v�0�bZ(�������=�pa�r!�+hQ�\`���i��4�A��B���y.�Y倲[�m'٠̲�ə�A6:�O�mT<�z2>��>����{S* 3)X)���|��=�|6Pn��߶��և��~ >��"�N���!u�I�f>�j�j!����qv���=���$I�R�����y"L��oC� ճ���Akݓ�UK�]���.J�W,�D�c�d��.K�}��*���h"--C�X�Z���;�ӏW���t��A�Ϻ�р����o&��|�8̎��,�SeF��]k���2(��&hc��C@�礛�h���ޑ��3�n�I��{�YB�4X�f|7�m�I[U~�g;��W� cp��Jw��dLOf�QT���� j����'.��vx����]�i1�w��S�]�E-�"`FA����T��ͅbrԞ��w���C � y_;߆8��m!��H�y��(� Ә����k�
Static task
static1
Behavioral task
behavioral1
Sample
4a02bf9b656ae0b32ee06f9de5ac0b92_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a02bf9b656ae0b32ee06f9de5ac0b92_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a02bf9b656ae0b32ee06f9de5ac0b92_JaffaCakes118
-
Size
3.1MB
-
MD5
4a02bf9b656ae0b32ee06f9de5ac0b92
-
SHA1
5cad5f9d44772d1a215483df093e962a89029e8b
-
SHA256
90e5547c1a85cc5177f60d7c282ec3dbd0887fe32c20f31441082c90fac77918
-
SHA512
35a33ecdcd187ca97ff616c386718d14dc84f9158cdfc2e60b6e2fee5f83b76df9b741d15cdc7127fc626d152b8cf295d1e52dd60bb9625124445e4918f8f07a
-
SSDEEP
98304:Gf3cMD8KlvH3Kpr5mm7PfAKn3bYmleNJ0:s3cNK5HapVTbAGUJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a02bf9b656ae0b32ee06f9de5ac0b92_JaffaCakes118
Files
-
4a02bf9b656ae0b32ee06f9de5ac0b92_JaffaCakes118.exe windows:4 windows x86 arch:x86
ef9890345aa069b0651d5f9688386b5e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadLocale
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
GetFocus
MessageBoxA
gdi32
GetStockObject
advapi32
RegQueryInfoKeyA
shell32
Shell_NotifyIconA
ole32
CoUninitialize
oleaut32
LoadTypeLi
comctl32
InitCommonControlsEx
ws2_32
WSASocketA
Exports
Exports
Sections
.text Size: - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DBB0 Size: - Virtual size: 591KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DBB1 Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ