�@I��涀(��ܹ\�S���rvw�T����� �����&�@?ڬ��1�N��=�f\�H��Y�� �3x@�]�@`R�IU�#\��L���wv�������c�[���o�{���I?�����VM-���ٔuU�����9���.�vo'k�� �EY��Q������N7���+Ԃ;�Wl�mu �kSw�#}�g� �������'~L����2��=�bu ,`d�k�%����p/��|����KXׂU�_�3k�?� ?e<�.f������|O�~��'����O[�!.�+Lª2yk��Mt{ [�'��m�&�V�~JN�۔g wb�A�yL��"���s�A�N@OY�%a�,���P���g]f�S����h9�������0�O��Q��/�z�O��T�U�' d�x�����m�p��ݯ��@V�� �]Yo�4V�H(�%��w�_�Q�%w���`IjA�<���g��1�8�|��,G]/oĵr���6[�F�L�z�,�9&���3~�%#uj>�ψ@���wn0y<��Ŧ��T*�hT�~�'���Яpﴞ� F����E�5K����0 �T��Gq3cq����kMQ�[�����9Q��^��v�����,>�I�bs, �[���U��l]�\���Z�*xL�$��\�$ٜ�#��(h�W�u(�@�˓���� ���4J ��#�_o:��L ��0�3ϘTY0�:i�Po֕���\��{ ��X�*� �)ru�R')�J&, ����ѿ��Fb���%�����kX�Qޱ"��1S�蜊B�����/�c��a/�^:�v��%_�7��ن+<�����'|n,W�� z�У�x$��e��J�K�����ȩ+�f^Y� ���HmD�2I�h�8�a�T��r#%Ѫ�[�HT�h��˭��&�b���B�( �����I=<l\H� ����>4,ٟT�w�.��0�A( ��)��l�Ʊ���J���b������=��l�[�zz�|��ƞ� �������&�d��S���>K���Ԋ��XH9&R�t�M3/���T(*�����s��y�,U���"�Id�d��Sh.Jni?|�D�gM������OF�@���C�V@�iZ�ޘrHk[��6}A��y������X���9���[�:����*c�+�wP��$ϵa�����6�A����uC);*�ܵ���jѩk� �2�^�a�ƻ��J���A+WU�����c���'�K����p����/>��}�{m@)%���M� ���̫��!q��,^8�pW+!\X���AYn���ɽ�mi2MS5ܴ�Lt���O�9�t�2��%k��c��u�L�JMSt0�8����8*#`�V�!��;������qm�~n�,�� �l��A�H%�w[ʬ1��.twd��$.�|�P.z)���Q��1���*>��-�O�q�\B�8�ke �Aͬ��=�d�8�%�3�S���]~���tZ�t�'#== Y�=Nm!S���;z}2���@��э�EU��X�3w[�ۋ"���(=���F-��{V4n�*�_�~?C�X F`T�``1��"Š�Q�7��ܻʭq�/�z��m���v,��vK�X�8:��{����6��B��|lg�#ꗱ�,��Ә��9W�z��h[���vL��$f�+�M>f*��K�v�X�lɅr�!�Ͼ���(����o .�Q���>��Һ�K��G���W�rt�v?>2P�:��?ҧQ��8� I/ʏ>�����Z��'���'08��N16��W9�lh�'�!��*J�~�9���|�'��%?�sum�(�����o/�V�e3[� m�d�s��j��!ƃ�%3��p�)@�F2�.�wVi�=ϧu,֞&��,�Z�Џ;�iC�߄���x�{o�kX*���� ��],�y*��n%��4���u+������@���7����k���� Q�� �����Խ��vC���ϭd ��p���R;uء @�QŪ�/f�c+�D|?@��)�N�R����Ɋ`~� +�b��������[�F������V�腃ﲊ�1z�!iŋ?�R�z��A�D��� ���Or�[�?��������Χ�ES��EL��ND)FX�a �&���Q���UK��F���ƈ��<���ﲓ&u�WB��N��'Õ��k���lY@�3.!�����Q�ϙ�'�"�" ���B?g��-�~���(?���o����x�U�gm?����z44e�D�}E��Ǎ��py���c~4s�~����"��I����n�s��Eui-�R������.�ꋑ����g�yK���(��1�F:`B�7��M��B�����H���9�`�9Fb,���z�:�k~<�m��hnlJ�X�T ��>����������:'����F�����]lb�%rs�.��L�aТ�r4�@̗�p��pRtpڔ��:�!����5MvCW�����1Z<���q��}��I�>gj��_�w�m4�d�!��G~�H��W������іfFb�VG��#�in�p6���9��1V�tD}d >J�,�w�����<� ���0�U:�X�Xo����:#o�'��f5�NFŃbur���ɉȏ ����_��4p#3B%�G3jxm�ކw��f�c�F���y��tĺ/�w27M��E���z����a�-����N����M9?�a��[p�/d�R8��t��%LZwr�F�Z���4~��쇕m9p�LIp^��^:~�8��/Tb�u���E����g�6��������u���6p0;��o7���f-�8�-e�l�C��ߡH�;����T��3Ӈ�Rz4�Qv��ǂ�ᇯ��P�gd8;�悜E���v��o|o/V�`�_r�H�,J���b=]q�'��_�}�E3b�`�SJ�p�Usl��+�����tn����9��Ŏ�p���%GA�˱u��$,�d�����gM�n�U��[y�h��S�q,��~��@�sZ��O��-����$j�_�㧕K�ycB
Static task
static1
Behavioral task
behavioral1
Sample
4c5b139cd140f21ded4f2e6aecefda89_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c5b139cd140f21ded4f2e6aecefda89_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c5b139cd140f21ded4f2e6aecefda89_JaffaCakes118
-
Size
2.5MB
-
MD5
4c5b139cd140f21ded4f2e6aecefda89
-
SHA1
29923b6d0df893526a139e90d6b7d5e279701d8f
-
SHA256
9636d2f9b40d732d86afb4e9a2f8a360b3351ebfdfded200c2f2a4f64f3657ee
-
SHA512
1e0ffaedad24832b34cbcfe16bcfa8445da82ef2a303e8085b122fe4f018b9691a580a7e9bc54140bcbb93a6c735d051b843fc3eb92116cb4a324c8ae6954ea5
-
SSDEEP
49152:z+cnm8Xkf+aY7urXGHKyCo91uZqtCdAa3DXhtF9/3eKJdNsIq0PQ0TIoOooJ+veO:z+j8Xkf+aY7Gyp9kZvCaFR/3eKJAIRIA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c5b139cd140f21ded4f2e6aecefda89_JaffaCakes118
Files
-
4c5b139cd140f21ded4f2e6aecefda89_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
sgUbeAib Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
S8k9VvXK Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DJ0lgNr8 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
41iGXnJx Size: 576B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CN28vbOF Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
npyev7ui Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
itMoTNJk Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ejSRZe2F Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ