q�I��+��UD� �25}J�����1�T^Px�]��^Z�I�E��~Aߧm<�%!�]��/ $53�ӁD! ���v,T�>���2EAkf� �%\�P�@73�pw��]�B��FH ղ���T�|}.ڸ�6�h,[�g��9�9-ڃ�.��Z��]�،�j�0ȡڨ��I tK���)e(p'���h��8�y,���ȕ�2C.m�S:x�^��q�d�q�eg~HY`��9��(Q��6�P�9h<����Bs�JD�81M���y�k�U� �rFIt�U�p@(�#����54Z5�!\�۳���ƥmד@�r�6Hr�1q�±Qn)�?d�8��J4�4����]���{K��6Zǿc������g1U�5N->��y3}���f�k�+��>�6��yr��h�0Ӊ���� �Y*����^D��C"��7]֙�<� ���I�7^��v�1�}}}�m���+�w �'��;��i������MI��8�"qJo� YD��K0�U�� ~K�b���~Ԅ:����h�o�b��_�� ����d!}�X��@�+QGu�݉gN�Be���ʹ���SB��n0�|�53�A�%֧̾x�~g<�9�����4��HO��G!�,̝��K 퇶� �~���D�w�a��R�4�O e��n,ߨ�j+�\t\Am��c<n2/`�5���PW��-ٮگq�������e�v���dZ�8c��5���Ј�✽�XD8p���t/���'j�J%mK͇'�9<������u��L(������W҄�)ҴԬ����L���oT?�&�jSg�<�x<ZZ<� XE#�?/�3�E��G��`laQ�����h�� �3dm8�ޒp*�,����`��$�Fuzڷ]<W��֚�3��V�o�{q��W���^F͊`���� Γ.�0 y�ݽ��~��/%� /!Dph:����܌�:˳A�qZ����"r���_Œ~��<��cW���� M�X�k�?!%$������,H���U��m4볮�$ᧃx���v_Ͱ�\�9�0B������M0�A���ϗ��GmϨ&�륫d�Br�� tǦ����^�Z���=��4���)'��:�鰭���U4�ev~�Q"Ν�A+��P"�Tk?*����Ar�Ws\���~@���|? ��������]��J��_��d�|{���dM���^�:�B�X��eH� �$� \��buE&��C�_K� \�;��yKǭ���0gX� fZ��kRY��w����c��V�|i�W�2F��=��jy�L^��6V�>u��K��U�gԷ� aH���pϝY����Day�ǰ@Y��g�k@�E�~���-����˖��x:'�u�r��q '���vR��$2�5v�m��֠/��o_A8���#)!��B�Q�8����S;ݢ܁s�����:{���`���3}��z��I�}�S�C@hL:&�:�n��R���K����Ƨ�Ρ� �J�֜� 1ܶ� ��0������wү92QAx�HpԺ�t�aC�`ˊ�*U=��3��^B��1�p1_���G uͪy(g�IBz�Z������|�ʴ���ٽT��߂��#���b�n`Փcd�)�!(������+ߤ��X��Bֳ�j���L<��E��z��!�@)E�H��T�GT�-�G����D����7z���8���3�_��I3}C�dTy�m}�+W���X��2�ڱ`#},w/|Rm�x�.�=��%Z- ���?���,w~�a�_��(&�;��o�X��"͒ѳ6f� UK!s����n�.(�fK��e^��N��<*-��:� �~+�( �-�"o�����2��r\��2�*�"M�L�E��@+ר�{~�0�~R��k���ox��FNc�s��-Q�А#Ρ$1o����z�r�G���QvE��_a�U�����p��Er��(�Ia�A� �|!�!ȑ?��Ir9�"���rü�����m�u����إT ~TUO��?�TxǢz��Z ����5���WJ���vG�o ��,���OPݪ�a��6���� @+���(\�:�W3͉�L��w�I�o+��+�&v��ka_L�C�R��l\���ַP�?"�+ �E����k.���O*mUZ�G��~�h�M��b��(B���ȳ���F(���P���^�@d���)���Q:H���=����F�N�7��� ���.P�b_GHq����Κ����P� �#�>b���/��-!><��J���E*旙�oV8էd��等��>�pl���ZjM���RQڗ�6��|N�(�R!2Ԙ�b���<w{t�Q�aO���1-`��(�?����b@�N�cٚ/a��Y���^Fei�՞�>��ҷ�9@&��{;���גL����}���I�r>���#�r�Ol7�rZ��s��7uz��F�y�O��זZ�Eϛ%߁��� u5��2�z���;Sی,3���ޥ!��xQ�=�ǁ3����i��$ F����E��ԛ���Kʄ�S�:�_y02�]SMN�ǥ j�\b�h�!�͋��[�*iA�v���'6s9 �%���VeF�g���"���;�q�w*#�I?А�J��:/r��4t��''� E�V�Cp�~'D�⼠�lr�i�YC��@�O�Pa�����@xLw�M�CL�܍�W��<҂��� N!�J�R�o�w��p�c&���* KQ���~&�y���P���7n��9)Fò�'�Fa�����+�6���BZ�z� �E���K¦��m�2��ͦ�#��-��=�$2>���z1k{\������?��-W7�d��-�~y��1�\�?��{�N�!|�I3X~�zi�A�P�.�0�H���^MH�O5�o��]���[-\�)�N��GT��9��~��-��j�J��0��JGr�{o%so(�mN=�U�"��$㫸�a�S�����njX��L=*?SBER%N��Қ��U��lp�2E�$��Oc�|<3��!�M`#(M*%�Q���9����Q���,*z��w3I���}Δz�PM�>e�WoL��
Static task
static1
Behavioral task
behavioral1
Sample
77c5a069305820be5c1e10066ee947c1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
77c5a069305820be5c1e10066ee947c1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
77c5a069305820be5c1e10066ee947c1_JaffaCakes118
-
Size
401KB
-
MD5
77c5a069305820be5c1e10066ee947c1
-
SHA1
932336d61ca1c187974ba451ca87823efab7109e
-
SHA256
1de66f8bad0fe1a184930b91ea6a310c5103dd0f987edd3fd08c9bdf5f8c9751
-
SHA512
712e180b81f75d0062ae85dc276b64e07c5453ef25cf9a1a3c59470eab45af8abfe0ab80d9338694d1d95d00f77f405ab48916116d999d920a853fcd8979e55e
-
SSDEEP
3072:tA8f7AqKcp+dYtqCdDqAoqHmX0hsm3pn8ZaQGA/itDIEkEp+ukZWnBp/hy2mzW:yHqKhgTddoqHwVqBKitnkEpc/2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77c5a069305820be5c1e10066ee947c1_JaffaCakes118
Files
-
77c5a069305820be5c1e10066ee947c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
0fd302a8ff2b5e12e4a97af4e574cb74
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
MessageBoxA
kernel32
WriteFile
LoadLibraryA
VirtualProtect
GetModuleFileNameA
comctl32
InitCommonControls
Exports
Exports
Sections
.text Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
+TVM+0 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
+TVM+1 Size: - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
+TVM+2 Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ