���*�e(?�4{0h���Lq�;V���^��<��@Y���`���1��;��g%b�����g��5��D�Co՟/k!�M��1$�� �MБj�'�m��^����3���Np�֔�b�6F&�?i����������-��2Ƈ��9`��'���N��Ek�!�^�ԝ_ ���(��}:���15��m�u��aR��������͐W���2ƣ��Y8<�'RW 8��e$ ��5f�#Q+�<�G�6U��@��r�^����=���� ���ߦ����|�Rw>w��ܼP�^�Xj�6&����b��ƻ����!��L��U�������ѢG%���o�k$����{� _���S�2��(?����C���&�Ь/�L���wϹl�'����O�hde"���.P��V���W���q�����q�*>�!����#��s+���SW{~�E5����������**"߭��t������R�;�����}v���0J�w: OX��ٖ�v�Ի�*��e����/ я|��*Ҵ��q-1��("yG��W���M)�~�S����e'�=˻n�Z��.6<�*��=�ͷ�͘���eC1I�q�a/`��2���V��T�T�o]SÉ��u��Ȼ��w�������M?���-�f��8s %g���{�t^hֽV���)c���%�М�U�a�38iW��M��~����c!�87�Xr�i���MPA��7�k�}��~�(%mU�J��� ���oԖ ��ch������6,�{�)�����d��0�5 C�ʀ V�M"���&0�4�A��+�~��ew?�VP��@{:�#��T�z=��&�oX��d�w���҂u�����YՑ�|Mk�y�PP*�K,v,���2CH*�0����3�qa!�2���X�͙7-�,X��__�B���/#JL۶L��2�]�~�\��[5��?ђ�;> �}c��w�[U���5���(����*?\o���+Ϫڂ��W����Y�)@�����ǼQ��/r�c:��m ���f�EƤU ��M�ZQ&���l;��й�ʿ�8�v�uV�Qg^.�Q1��vY+��Q$m�|l_|'�,�WN�,+He���jK�(��6�hU�Q@�F@�+ A=�W�||��ъ�����F�3P��Aۂ�����4eᥲ-���q�L,S��>�!<º�1?mX~��gK�������:y`OGf�(���g:"���[y���t:��v�R�ʕ�?H�u�CS��0RKk�6����c����w}�!�I��cƑp�(y9獳�E?��_^�Us��y�m��|xz�G��{����$Y���)��E�f�Ų.U��& y,i����f�)Y��0l�����X������,��,�>�O�.P���ɓ�0��&�Й8��Ǡ!h�������5(�3.��s�@ӗ���T�0֣4px���Z*IZ�C��$啤I�L.�p���f����H��x6���n}Ɋpx�&%��',�%��t�#ǥ��} ���*�]�LV� ;���ʸ�l�<�� �D�{nªg�s5��'��j��~9PK`d v��y����Z����'��#qf6E�F[�f��@�W���/� &H����g5������;�?�E��2L9�Lt+�UlNT̠��C�no�=E��0���x����C�ڲ�A.�Ԁ�|���nh%B�ƞ�7���,�Vr]�lj��u��7��ʯ�A��'�=��ѡ������� �/�B��W���5O`b�u6��/���֓S������g��쬲�֛Pt����|Z}Q�w�H&m��U)��[����b��+�z���$;;?*k�?"�z���A�l���Jy���YuɅ�I�R�!�Q��[j�E���"���Rq���������=��!����6�pXꩧj�B��B�Q-�F��Q��tl��_weh��`�|���d ��2�R�����l���a��&<�d�Q�_�����ET��X�~��:1��qA��o�~��&�`z��p|�O�k?��Q�T�h�E�8�Pq>���ܤȷD(�Q���V��������c9]��T�uTАE�7�k�����3���WV����G�����L�h��͞u�xKsE�ރ��2]@��m��h8+��G�-����������r�P��p���^H�T� ��uQW �ѐ�h��!��v_&*l���t���Z%G�:�&I����L�<�B��XuF�X��lo�TqٞhS2i�!��:�[��7y�i^�W�h=��D��r\�0/��D���CWpcR�jQ��\aU.G�_��9��r[O�O�S�|z\m|O0�E�&)d��ԛ�I> q�]�({m��~+�:�N��n�Z\��� &���]�|�tR�-��Ii|V"$�@s!�N��V�S1���M���l0�Z_�ʵQY_�v���MwM���u��v�{�� �%yZ���ux��[��ݟ�uY���6���Q?�2���%����(��/ډ[t/x7�2)jD�t�1�pJuF&p�46adB�:��g�h�']��xn�{�;ݡ��lOtA10�s�������&�ENj_><5� ������'x���K���[ɦ+q���~�$�!P#QO���4� rQ9Ҫ��r+IP��^�bo��a����/�������FJg!()ca5u��a��ԙ�.�ʂ��F���Qv���n[t��0ڃ��_j��Wb��U�,Lo��nK�/���9�ы��!4��K�G>�U����IhB P(�E��)�m�ͳ8�l�'�h�Y����� � �R� e��a%����`���0�0_�+���6Y���[_����g�hl=��c Smm<�:�K<��5���e�o2!�c]�mo���ǵzs����fتL���]�yV�aVwJ�"�8�(���`�����¼�3��;;B���� ���e-K�+}Z��'�YG�D��^z�e���̘(A\����M��N�{�7wA�^��w��s����X�Qߒ� n�|a;Q綝�u]���x��Si7����խ��n�茿��R|
Static task
static1
Behavioral task
behavioral1
Sample
93d16f1504a4b4a09ea6c789dd92164e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
93d16f1504a4b4a09ea6c789dd92164e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
93d16f1504a4b4a09ea6c789dd92164e_JaffaCakes118
-
Size
912KB
-
MD5
93d16f1504a4b4a09ea6c789dd92164e
-
SHA1
8da1350c43c9f454033b5fa9a57134d29caa396d
-
SHA256
90236788e3c3603fdb63edb376d024a33b5dfbdadf968d9d0bff256d62018c46
-
SHA512
defec4d9a9307067968717604c83f5c9dcc383da9ca6224672def043516c022371a370bebdb43ada830a1bfaf5cfc26f13709adb4bf2be7aa849aaca8c15d52f
-
SSDEEP
12288:bbdiYq3Kqzc+BvLP8Ff4KM9sA6Ubh4Mxv23BubuQGSxMWJu9vtU+amG0Wd6VFerW:bpM23MsYumGSxhu9ITZd6VF1JIi1P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93d16f1504a4b4a09ea6c789dd92164e_JaffaCakes118
Files
-
93d16f1504a4b4a09ea6c789dd92164e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
EPE0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EPE1 Size: 888KB - Virtual size: 886KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE