bx{r��F�BAI�݈b��0X�d������g�C�̿]�iN�̎,����=fu2��^�N�!J5I��H����C�O�I��$���^��p��ɃC�v:��u�e3�"ΛtUX���t���ؗ�:�����Ѐ������o�,�1�o'�l����>!Y�4O,)��6Aqw�����t`Q���v��6�5gI;o�١#�*��=��j�����!{��VSL��'���n@�&4I���{a' Ļ9˩��:�%�9�����#z_�w�}�aPxzc�\�SeSC��5�!6�5O��{:�Po]����`-��f9u��iw����w�Zf h���U��?��u��C������[K�x��O���Z?i��� �v�组��-6[���$���D�,�M���6���&��҉x_44bTc/��f=� ˏ�u���{m�L�TM��`@�^�y �j���=���2lER"i>K�Z����o��j�<��Y�C'F��{$�����o4<(�,�N$8`s:���l=�a�ß=�"a����.�h]�u���HS*x�k!���F�eq�w<,N���:��7>��˪�iw��p�_��d(�̒d�3�����0���z�!���pϳ����X�����fT��j�b*> �ݞ�/O; 6-N�OdM�����ިR�8sb�k5��T�ޕ���`����f�j_���V��=8P90T�{�4e�j9�6r�a�vm:�C �m�N�� ǼЛa��6(�ɢa+�4�PvX�rb0���#�����yͯ�h��W�6b�;)�i�����^Ϙ�;��,�SK��o�T;����j}�w����]^���m���1����� J��B�����+��/�yN4��R)�S]@p�9B���Ihm�P�DI1��-^�Q�`���agIr�^��j��q� 79BK̗WjޙA�O���"���X���ͪ��� ˓�9��d;+�2+���ۓ�ۃ��d�]U��G (w���tE��� ���τ�_v���w�) �9����!W'���h���o<d�yH�e* )��B�RN>�[�����A�O=��8ř�§�N�8" ����|�2%)�vcJ��q�0ڈ=����'��iȿ��m) m<���ĕgY��ݝ҅�ؚ[Z�[�m��nz{��S�==#�gq}J�$Y]����+K.�]�\�,d%� ~A`aH��ma>iv�l��4���A�\(i�H%6��*=������z�Y�i�*6#u���W���#���mg�j��}�)���Sw���d����wI�tzI�^��Q0 �Sm0��(���%̴�+��q�>�O����Ph�\�n�q�<�Y�|ѡ+���V�|�oN����f��@�|��4���U��P�:�O�Ʌ��-^�lI�Z�錄�����عꏮ��AVi��F���.�+bT���Cʕi�Aю�ɺP�2�t.}�]�/p�&B<��16�����C��������"�X]Q�)��,ݏ�^� _ ��������� �b�rE��Ц�w��D���!�H������d���1Õq�Kr-�9 ��fK�2�{��c�.X+l����d�%�U�ַ�f� O�_-�����2Hw�����`�t��X�^sb,8�H;q즆�Mlۆ�`�@y�Ψ��� ��x����^̔���LW�ٸ���FA�۽�͇&�����#0�kE_L�Y�u4w�:�-�H�M��S�i��D�I���-r�{l�����虅2�C�f��k�>��0 ��G7/\�'���=8���'��:�-����R�-�Z�NB�� L#�i�Ĥ*�w{���8�u�L'~�W:c "@��-n_%)-`@�-!;�9*8��ȫ!4rq�8t��;����㜲��1G <��V��9DMEc��� ���7=�3�!X�k)��7�����I����0F ����Đh�C{��r��Hx�K���ԩ0�`ـq(��`.�U��O�uDg/�p�n���k��� ��I���&�G/c������w!;_B �G#�f���ỷ �����dMW��H�^�7G]�Ɂ��C�8^?.w{=�������n��T7cC�!}�����nR�!��������d�f4�+�B��4���o�0Їe�~)�k�u��Hw����4�"���E�VZ�kw��� ���ҮJH�G��Y�"�2?�h�(���ܘ`�x��!d[��o�*��7y�i��:Y����"�p��}*g=lo�gi�,ZYu��4�7j�TgֳY�E/ I�EO��<�4͈}�N��I���Ӏ4�4�_�X�]�%�}���1B��Re��,�<�{P�L�� A�LF��X)i�<�ML�Z��KKW��a�N+�L�o]T-��5+s���y�|��`���� �p�7�2��-W���Weѳ��Gr�Ő��9����G�1 i=. ��5>3��"OzK5�]�-cf�����Dǃ�%���a9�#�b�F�Մ�Q���`����r}�~+gm"bAS������(�U�i�!d�wͮ"]C�߉�{�I] ���ڗk&����Og/���E�,!��Ir�G�`���e{�~������:�W4����d����M� x�]#�������;P;PU �z��犾����ruLX�:�o�@3���3s�.ho����,{���1T~��u�����k�.x�y����VH�7����������� ����?���9с�qڄ ���·_ �e��6 �'٢#%H��ۥ��L�t�L��?)ֶ�;����8�b������~2�����a���dm�2)(O��À|�;ۆ����:�'O��"���Z�Ft)fHz�����Ljf�G�����Г@��-�1��� �tg�ȓ�@/���YX���t���N����Z��<9������y��Ӑ6Xef�����%�0��W?���il���]'3 ���*�'S�XA�a��踚����' Ó����j��K�R����u�X)eU;܈�������} cW`tƺɩ�H4f�%�z��1{Ƹ$u*� �e�
Static task
static1
Behavioral task
behavioral1
Sample
a48b22015f13d6f4e3655644ee77d20d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a48b22015f13d6f4e3655644ee77d20d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a48b22015f13d6f4e3655644ee77d20d_JaffaCakes118
-
Size
184KB
-
MD5
a48b22015f13d6f4e3655644ee77d20d
-
SHA1
bfe1be64577136cccd3f3e98630c3decb1e9670a
-
SHA256
ceeba09eb225dbfd72869be997dd4b2c420cefc5995c1781ee21856aa2ded322
-
SHA512
da634f40fd712e5a32b1a4330c1f926069a43acb88dafa14c1664ac4ef520da7b18bd626877c8a8a23b9c8d13752e89ec01e5c60f88f44f5fdba9ab91440f7ec
-
SSDEEP
3072:KHsrr4QccgvJqEdvjOIrodxrDLx7LrsmbT4lb7vRi6MOxPagSQ8Qm:X88MLiIrodFZvrXQ97paOxPagS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a48b22015f13d6f4e3655644ee77d20d_JaffaCakes118
Files
-
a48b22015f13d6f4e3655644ee77d20d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c9f76460b4fdebe32caec3ff6c4e5fee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwAllocateVirtualMemory
kernel32
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
UCP0 Size: - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UCP1 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE