\���v^�!H�(e��� ��:���H����du?o{����M u�o������g&ީ��z&f�++��b_����ĩhv 4�h<j�4\�bw`�AF����6���B�d�X�s#��5b�a�uu�j�ѝh�>#9w����+���� �:˩zABTo ��]�fK�<�;��N@<�����бǗ� ݰ���j��H�����O�#;Z�C4A_ֽm��Q�|[<���FH��їˉ���so5!tl ������Z&��<XuN{��p�_��az}Tj��g{f@~(I[�y��Ls��r���#x�[��kJ�P��J�!n���L� H��*�-�e74�����2��r������R ��BM/T|���^�(�2�g���k+>f���Q�m,����2��Fb�(kbp�c%�%�/��Ld�E\0b6S���=H�Vۇuҧ�mC��e��7K�t��Vc��g��Q�����IA6��Bmu�;v��+���t�,Ƥ+�qq4W�����#�?�-2%�6�D����wD�xG�W=�E>d��']�뺥�x��[�P�Ѡ`n�ݷD ��Sڳ�����V��``�x7���e'h�Q*�F����5s����K���٣��͗�� �t+���v���9ˌ*�6�nb������/8��Jʖ\S�8��r���e�$Q"���l��,e�]�W �.��y��:��[��lmހjh9���~�������^����q�=��XJM]�۞&���T���|H-?SnG���`y7I�p����+��x9�y��g8:u9�q�����o��`f����>��d���?����b)m�|�D���22�.`��Nɗ�v�e ��m�K����?�k���{@��b�n�nSr�-) �Q3 F��Z6YNw��m���3�U*���m!���m8&�����(��K�Ӏ&�/Ԉ��^{XX" ;P�ӝ<EQ�M�fT�6��(0�[HN �+G-��n���%�r3Aʌ0�,wJ7���;8G�]�ٷ����N��fD��`�|S`��+j1�|of�8�(y�%�@pu��N����#�-��!�=�_}�e��/���i$��ݥ}��ٚ��h��σ�sl��s� Mx�R0QDJ̺d���:��3�������>��zLq���L+�|���ξ�<��a)Y�"]�fg)��+k\����������x|�K��B�B'��1�^�#V{$v�H��%����>_a,���Ƶ#��&�����[��ƍ�\ Ѹ� ����D�yl|�}2o��4Ey-y�˽Y�&%DN�lE�n���S�(?6'������+-B�l���j����|��e�,�9������LT��y��<��s��A��]"��$��{� 8��R2��U�pz%�.s� �Y��1�є�:� ⢶��{����[���e��?*��;+�ڸ�P�o�Z*���m1M�����adD������OE9>�4n�b�Y" Lik� ��/Yra�g��A�3; ����9�P�n|R�g�c�-|�������_�c �Y��r��1�v%���Ly��ʊM�p�2�\���{�Ԗy�FIN`�Q7'zˆ�:�d4t��3Z&*9���?�����|�� ����*�����J�sI )r�a��y�����"Q�۠�ÿ�1�IU`�a"�*�C�ږC�v�.��&���Θ�v}I3 t�gA�f�I�10<PܾS��__�1æ '�����A�A��X�I?��=����EG��}4�FK��vRDf�@�>���Й_�D3�]������b��RG�h�ق��+������ ٭��"�̼����Uz�y֙��Z��7B_Gφx^1__�<�i�?V��[�F���)(�r�ۅ~n��+j�����������:)78C��hr�1k��%����2Bp��Z�pl�����Ӡ�����!;��h����!.���\�;�MF�>�S�B�����s�>�?��(͆0��o�F���81��>�B��X_�<���_���*`)�-�I�����t=�j0t�R�H���tES�����L��|iS�<�w��*%W'hL Z0a��?#���p�w_��ӄ�����A�����[d��b w���; �<���p� Dg��(F1���`��{k�}�^�)�Q���Ҝ�"V��?�A����,�8����%x?����U�ͫgi{F�����5����+NJ�a�f8��Y���w�EL�,:l��%X�M�2�B��'�LF}�)�����:F�*L��+O@����k�b#��f��Wp,�;�r���/gXU�+�K�d��*�%��Vɽ��-������˝���;�;��ᛩ�r�O{�}�Ιl��r_}�5`9��.h2��E��ɦ�k�<z@�n �1/6� � ^��u=�@�rZ���D��3���Q0�i��#�� ��dT�^J��Pk�͒v���.�;��1POÁr� �08Ǘ��X��bp�.G��I�X�Dn�P#Q��L�!m�;w��A���D�u�7�߾`������+{��W�<%����Ǯv������̿����a���/b�~IE)~L�f�\Q1��έ&ر{ע�N�/���Y�^���!�ٗr�X�3X�\a���kq�*ړ^~f;����-W�.~z&�\��Bz=}��*@�(M~A�;����TĽ�y�K�� ��0�.m����r�DVzx���PT�ቧ!��g��8��U:x�-����Ҵ���dP�k��:�zL��o얨��� ϼovտ��Pj���Pmh�y���Aml�=��agr9V�����S�U��F��2 ��Ir,BmY��t>!��5�o��1�d y�s���N������QA��24sѷL}X)+`kB�-�9pkyu��A�!x����p3� aLv9�*q����S$�x}��S���[�s?���\/˹ѵ�'s���G�7�r��v��l�GD�Y�ʪg�wY�s�[�_�ճE�Q�����E����RXc�������*yP�G���J֝1�)���܆,źBi�w�{0`��
Static task
static1
Behavioral task
behavioral1
Sample
856102d508fa91927b12838958da0c6f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
856102d508fa91927b12838958da0c6f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
856102d508fa91927b12838958da0c6f_JaffaCakes118
-
Size
744KB
-
MD5
856102d508fa91927b12838958da0c6f
-
SHA1
b88688cc331774756e23b2c98383f1f4683ebc30
-
SHA256
144d590b58fe71e1e9778bd4d3d3cd737049d94ac87a159a7ac7c7cd788f58a8
-
SHA512
cb899083bfcfecdf8c666734a08acca2e26be571d253ff533c61d93cabc18cdf051f0e895013e65c999e4284a34e966c9101da6a813cf2deac68052582d7bf84
-
SSDEEP
12288:wxu9R3DyLHNVG1kRwfmHnnSnjHxEdUXqC1S2tZyGUREADmP47+U:IujyZVDLnAjKdkqC1S2tZOmPer
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 856102d508fa91927b12838958da0c6f_JaffaCakes118
Files
-
856102d508fa91927b12838958da0c6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
di6p32YI Size: - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vxTHS4CU Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
N5CBqCWu Size: 715KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
adBTNxzF Size: 264B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
96WM5XdK Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
QqieVJ4p Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t3VxRP4S Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
yAFFuLYP Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ