�+���{W�Yyj����)��c���(jCh XWr�ʷ5���N���F�-���7k��1x��+�� x�:�t<�#��0`w���yl:8& ���&���Z��H��ӣ�)�L�Q�hd+����$���+)�b�{��_.���� � �p�x�Lȍꑻ� �^��o=n9b���|Y��~��7����q[@r<����M@��x�CJ�Ui��6$�>)_�=�i��Q�Q�u�� �T7j���+� �Ą:�??`l�w�7�d����YG�HQ�0B�^wn1�?�H�k[�j�b��J:(���8=���S ��ϊcH�4<��]��D2�ӓ ��,m�7�I�@�~;�J�8 E�|c$շ����W����;�- 4�څ9�\����Q�=�&��h�!ߎy�'��*����j � ��yK���@FZm�JW#=}�Fؘ歩��]���:�hN6����bv�d�W��A^H��)j}j��{�n�c���{�1M��Z����H�eE��ql �W1T��O���F��ְbI�S�c�m ��$;�>5$���T� %���O(�*bNaZ�)��������Pڶ�rr��靕�vK+��uz_���-M���� ��!N������˓҅]����\�4���V.�����]w`�#���*u֧>$�od��$]")��U���/�r�L��s"ִ���TU�B�i��kFԄb��ۯ�o5�*���>�%�]�Vܴf�j�4�qĺ����}������� CX�-.E��������D:�Jg����K�*�c�c��%�Qؑ��3F���)y�v�s��!�g�e_i�g���v}<���4�c�l��B������ �a��Q ����s�I@��+]� ��¨<L�s�iN�&��ꇋׂ}�ܸ�����VPBE�q�k*��~?EPpA0���������==L�Ap��;�+l�; v�|0u8�����c t<EsW�4��ņ ��[IQ�1Z�b _z��١�KJLQ�㑦f��jʈzK��|��� ���_Xl�5+������� \�:(31r��2�Lx���\L�Y�DƖ�n5Eo�i���(���-�{� ʶe&�mx�т�w=z��L��[ׄ�֕(!ўzE)^�1o=��F���1(����ENe��)1�W��6���i��� �^��y���&��<8}���v��}��N�j>�@s����o����!w���f͎�oP��i� ^��i<�)!�+�8�i�� ��Ӯ 花Svn��Y�T�e�_r��ٮj�"�i{� z"���O!S�@�����&; ��,��2�7,'��#\���g������@X��rٛ�� �dn���>9���N��%6����5eUFg0�U��";�m�ɕl�����(X��8�L+�BR9���9��Ǥ�,���|&;<F��F��q�Is�I��Y��]�.cN��f�j���1D>Ŧ�mP���*o�A����Z�Bo(��p*��\�i�n��$���>�_�W㗃��Y�V���p�j�S�*�wJ����#��!�k���=��`�D�z�i�;���k�e�0�,�r��=������9m�#���[c}kR�b�̖L�w�'2�'Frk����gN3��|�u���Au��yd VQ7�S�k����l�!��0D ည���].1ͥ��o��PX|>�� ,���v�v�z0^a/<W� ��$y�����svGd�4[�-�H3:�לF��+�s��`�<��_�Y�쿟��ޝ{��ܐ�}9.Ӟ�u��f����tz��{�j!�ٜK��*v�C���ʥ���{�����+Ÿ>'�P����^���0��r�Y!%�_B٣���=�}�@�,H�L���e�{�5%��Ejq(�Gya5������w �<�w�Q]rT�Oݼ)KrS����|��X�{$�� �8U|�%����v`sU��\�(��<lC%���+�+. 8b>Ӭ=�p�l��ĞD���������<��&���,�0����0�oԡ��EB���Ҙ/釡H�~Ow�ъ+�W]!1�������֨�MH�}�6�acn�x`�hW�����/��Z�K���9I�� ]<g��߶6C�)��ۯ��"m�~���2�G0��2����e��S��c�W~���͉Wm6m�Z�Qƅ����t�^��D5C澗�)�H<#ο�8b�s�%�6�ڼ'*�@+̍yV]���}�%�"}=����v���5��]\�{����:G�����n����8�9\j3g~�"�lϺAv2`*h���ёaT�R!F��yB'XRH-�g�%4��Kֹ��a�cy���aӯ ���c���GϠm�2����I��O@���b"��)[�7��m�b����/֕o:���r�ضJ��jo�ՐC�cY���qm[AW��� m��Rm�< ����hd�_��)���� G�9͝�B�x��ҝ�,1'Hx� ��*�vG���'{��7�HA��2�G1�mL|I��4��۽�.FK�}����%WD���M&��Ů��ٌ'�������л����M��=������i�}���p�"�$�8�j�^�p0��#�_e��-��l���"xG����-����u�0�0FYE>�����i<�Y{"�RBNU0a�$��`���C�^��x�u�C#��`_�H���E���cI�.!o��ՠl���Z-���V)���ڭ�?A��r����)�nܵ|tO����C\���f�g)��Y�!�x~�����1��!��"�BY�ӎ]�?^���(�)��u3���I�q���.��b_Eqٍ�ڳ͏M[н��w��c_k�ߝ}�R/�i������������Uۢ< V�5:�χ#0��2���~B�pհ���3�^�����(���/����� P�ʓ�s���X�2ᕄ>�SV�:�|.��u[�������&u�����b"�编�E�Do���a��:�\���d��+�N�����Z`���l_˳�\��+��P�Ϋ�
Static task
static1
Behavioral task
behavioral1
Sample
94302ea52223c5800569d9460c093938_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
94302ea52223c5800569d9460c093938_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94302ea52223c5800569d9460c093938_JaffaCakes118
-
Size
820KB
-
MD5
94302ea52223c5800569d9460c093938
-
SHA1
9607aa20b9c4d215d9992315f221981d3b9c9b4e
-
SHA256
179fdb8f05118f4641d069d434db67288bc786a898575f274549a26d15c4c9a4
-
SHA512
eb4cf1107db7b73d18611474a987fe63947c36b1e812a5e3864b0b57bd85221a6b829b070d8934893277f35c7bfa28a553744a30b77ce54891a6143d4cfcf097
-
SSDEEP
12288:CUo6YxHEe0kELlLGzOTePKxljav4sa/Jyc4y57RlWNYoq6ciOrl4rLvHr:ZedETkMum7ljaQsan4y57jWWoAnhsL/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94302ea52223c5800569d9460c093938_JaffaCakes118
Files
-
94302ea52223c5800569d9460c093938_JaffaCakes118.exe windows:4 windows x86 arch:x86
b5a6a25ad48910612c3a815d19d761e9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
kernel32
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 653KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 780KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ