��M&�Tàl&�S�v�[�S[��w�f0sD��1��Sq g��|��;u;:" S�&��X���Wz1��V��˔�o�H�=�be|f�V��u��@6��e^#�1&��%R�J��U.�-�7�X2Q�틃K��2Ћz�ش�D+�9߽�a���J{<�]yք��[[� �F��V��&�5HW�/Q�#xʉCM�Z}�7� 6ش>ش)�@���N��~H���RPb���~��y�^Xl����`�YGYb�[����)\�<���A�.��>Qm-�%ST��[[�c~=�����66�������7����<��Iؙ��Z!�T�@A_���x�TZZ��-j��'5ջ˙�T@�� o�`wc,�,d1oo�f��"q^�o��/��Ƞ7��3�4i����o>��A�c;l��,����Lq�CN�$��-��.;4$ޭk8�5�1A���wEh/�( ��^[�1 3J0�ɟS��Î���m�S��8��@H[����?gA}ʷ*~��sy�Z,�Iry|������|��i�&k<���[?Hj0�JT�����Z�E���b��`�p�� |���/��xZ���+n��K�q�S� ��{�S�5�|8\���X�1�dY+a"����������4I�'K�Bf���v���ᚦA�o�~UR�� ����M;�uШ`�0Iu�Kf�ꪍo��I�['7�s���L��R�E3k��*?���3t��<��=��5Q��s�z�7�]��[~0��� vO��8B8B��c�G��(�E>G�@���D���i�ON2��AG9�����]K{�D�y�L̽���IWhJ����0�##{v .�� ����9#c�XB̰T�/ ���Lդy����*����XGҳ����{Q�E ��h�\*'c��l����V=��Pn�����ܝ{OT�J?�jv�p��9��x��:*�mg��c ����d9�G�Qe�6�M���p�0 ���~$�yj6�PA��P�����?/��Trfφ�<%�ڼ�2��ـ�־$D~AuE#\"����� K_u�zb47��ܔsrY����*_�X\�"~�2Y�47���;š��K6�p��;���Q�@%��8�XT����La���Y�|-�|,B*A�i�Q$�*�����'�b|2���,�\�mh�WK��N[��./�����>�&8��^E:�_q�u�2�2�ul֠���Y�82�����W��v�Y�����_��'5�h8U88�H��L�b ��]�,l�7+�o/C�&���\' ��j�Y�-L�[Ō�������$5Qӱ�_��\���<尊��Ep&�6xqh;_l�3n���n�K�j��8?��Y:=v���@�d�C���7��� �'�����@gz ��Bq���%��{���b J��_��)����B}��ɫ�|�'���0�7�e��נM�2ZGj��Q0c4dFķ\�B҅1 9Ze� �adAk6v��0��Ƿa�O�(���h��H���N�L/�z�.S�K@��Y�5�x��'��a&��z����ߖ��-��b5�����t�3�+xƕ�*��4kaK�uy{��(]�~�����{������UfC�0�`���O���?XE)��t��|J��/A�����.1�ԗJ%Xa�%��J#k'� P�PGb�h�x �"��=��7�&z��_�q���g{��5.9<��z*�*�M�i�?so�:;���4}�����zF�R9_�N#fSn���% �\�c���D�|��w�/�;w@��H%���Ɵ�;s!�����R��_��g�P)�E�0�d/�wԅ�y��Bnڧ�^B�њ]|��t�!�vv�Tf�Ю\u5\wS�=&��%�e�/^��.���h>��/�s��76�c�OA�����8�q�K�%��Q�U�J�Fv�Dfcp��Y+~����c�3_�68�P@������z���,fq;[�!d�}�t��7c��(�� @ М��YI���=MU��(-Z�ł�4����=�Mf� ���탢���z���$�YC���Ǖ=- �T=�V�K����i����A�d3��t{y��!�� �ρC�<#���l3 *� ��=*�&��`G�Y��?Aa�[��� ��˫ȸ��d�wz�?��cKK,��F��o�$Ўq���/��`�>m�P�4�Bz��U��H�v�%�B�ڶ�C#(��3�W$��M������]e�'��+p���|�3P�qO�_�<���费# ��Kƚ��U �o~3y��u"�Ѓx|��B�qQ�8�@�U�7� �����'��"�-,.��tP�4_*���%Ur����� X�'���gީ�t�B)'WxX�4�<���N�>2E/e�__����n����<ğ�����̈́��:C�+#<���|��?�^e�܉87M�4�� z~��4������K�@�1�d%ipk9G�:����4���\a���������&nB��V1�1d�H�J�c���h=��,%p��=a��T�H����P�{ezm��e~��(�Mh}q���l?���I�5g�����N���D|ω��K��c���B/<v:��^# ���Xo-}��2��.3���;~��.�LŔ�R��) �X��!ޯ&kJ�Z��p�lF"vp.%i&e�8�Q��-�b��m�j��v�'��A|��S5�.M�\���I����U�r�#e)k�u�ߓ.pٌY+����|T�B�z0�����lSK�$f��6��D�?i9�����y�o����(?��+�t~S�����H��갳0,T��{�X����p�-J��e���:j��j�y������_� Vaۣ ׁ,d��=)f���ϐ��s�v_l��_8}���@���c�}�ռ� Z�D���G\��)i��~@}̟�����s��W0�\#����E���.as2��=_�U+�x�a�����%�qW��I�MߕUp��K��z�4�A�i?��kL����j�H�&��F���F�?Y[�6Qt��Z�$��yeKH�|�릛7��~d�]�_�O��#�mK��<Ŷh��?qb�WE%�{��a��=m��DQ���q7k ��z����4tb C��>)�^�������W*��N6�Wb�g�5��}L�"�����N!6�k8x�FZ�������K.�6����<�M��&{�#}S�@D���J\Թ ��&%u"E\;ހnŀm���pv�2p�(�ĕ�/�9���"LI��?<�/>~S�q����=shf0���27w|�߱B���u�n�-7O��%A���HJ&��L�;Bx��d�J�r��X�L]Y�#c�� ��j��l��/��f9tO��hJ5�M6Ăt�$��t�Հ�m������k�h�p쟂�6tj�/���!x~X^�Z��)��Vᾏ|�����u��ͮ�� ������MIy��xmU˫� v�lYO� �����"�}a�_�Y~�W��U���p�S/�yx�T�rs���i��x`X�m�����9��_Q]�|3ݙ����WI(ƯP)�D/�A������u��f�Jۧ��n[�<-H?>;��>gP�d�ϲx-�d/nEj�ڰ���ڲ�����ֽa���Ur xUCT�9���-�{�Z��}l?��pN�������O��J�y�\,yu
Static task
static1
Behavioral task
behavioral1
Sample
81e8eed1be75c7f90e761a52ed36d54d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
81e8eed1be75c7f90e761a52ed36d54d_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81e8eed1be75c7f90e761a52ed36d54d_JaffaCakes118
-
Size
1.2MB
-
MD5
81e8eed1be75c7f90e761a52ed36d54d
-
SHA1
ad1eeb71d02c4335247275b0d6001ddca891e073
-
SHA256
0638fc21979037a112f35a1e126d46310e20da91a06d2d84074fbbe3f62761ff
-
SHA512
fef048792e378db2b38d41970cfa889c7572d670ddff6066c3557735a0f5145f3ed1012ad79bd7e9c00e63e4580d0e2926bf5578cc94902c9780674909b09906
-
SSDEEP
24576:JgKXRfLujIXnTLsotVv6h7e8tvrqCXeBxS/FNA2c5KtIXT1FRmYE3xrSQZyHx7I/:JgKBuIXn3soIHY/S/FGNKQjALZimRvV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81e8eed1be75c7f90e761a52ed36d54d_JaffaCakes118
Files
-
81e8eed1be75c7f90e761a52ed36d54d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 508KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 424KB - Virtual size: 8.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE