�Ku����RƓy>dzV7�F���*S��p�9)��zB�(�GUs&�&c��>pVrz1�`����$��c��V1�zk�r�w�� *VgC7q۵�Mbi�I��{��s� #o,w�M����A}�c���<�P>,c���������)B开� ?إ��:Qv�xL���yJ�<��� @1���3�A?A�V��_ ���E��D�ʸ�e3�>d$��Ơ�P���.�Ċ ǥb@��j��by�������x�@��� �&�B��{9u���K���:�g��vd^:�f�}��>�[M(?ʳ�L��6r��q��ƐG>��A�3Ο��/�8�Bp��C���:�1[��2�����3ޯ<�P����*�)Bu#_���=�/�OW ��;A�Ea(��4:'m��ʕxo�*�^5p���cو�p���г�Dhm?+�A����g{���u�����r}�U4�\�OC�l�nC~'M5cë����H3~���.7�_��Ӗ��X�[�gH�M|@-�6���&�g�V�ˬ���8u��]�H���P�*Oz �9�t�X��Q��]�,wz��90��@rAm�94���bտ�JC��Dе�-�Sz= �UU)��������X�Uζ�ެE1&_-6]a����+ a42�+�%O�O��877��#a�Dd���J9����ᩚ+ݿ�!�ѸW�o ���HMiO�9ܲ��9�@B�k"x;��i'���6�W7r}����4m_3�����l�C��2���m @�zz�Cf����}-`��ֲl#����2��D��+&p���c�dʈ�np~�6�zl�\�jR_p%|��\��#3W]X�j��]V��}���JÂ�r�j)ǚ�lG���%.,����B��g�^O3���߱J����8&���I?KS?e��V\���C��ůҰjf*�q�]��4����]���"u)��E�@�����#�b�)#�����`�+���ӦB3��B�'B�w�����Q0c�Ė�8>��W��G���-��5�g�J��Kb�Ȑn���{O�J�����A�7_�����L�����綏g`��s�����c��x���y-�z�\#"$W�0J�����P,�R���_:7�>Ę,̦t�X*7��@^��3'��3�V��2���Se����,�2�����H�U��-1�A��u=�Y�>����Y-.�~�`9i�d#*�:'�Q�YF%�<�����iX�6\�Ӆ�{���Ma��Q��_U���������� ���q[��Yq ʹV�&j���@�VY�g�~�s�W������#���bV̔l�]�7On�#���?��t�1z{�p(�⯖Q�R_6O�]��L]�F�\�6u]�b����z�������J���Se�b+��D%��ڒ:�*���]4d����K?�*��.fJԉ$eP�8�G�>���F��o#Y�21_I���7[^�����h'pnĬ��5���� �G�U�^�M�7K �4M�ABz5e�k'��*\]�\²�oi�=��P� 6ߨnihޛ(�m^�Tξɂ��9 q�2� ��<�!�x��AP.�9�d:��۸?H��VU�o�d<$�퐧C�)s���f�-[�F}oSk�N��j��+�����'Q��+d����-�IYQ�����K�~~yi�_�ɪw�@�� B�{}%��siR.���+��*��H"���G�B�dTw泶=�1)��0�&���{mB��CFá;���2ǻ;&)��Tn�J]�G��u4�W�%�e�I&|�XX����5��s���A鯌Ƚ��;ܞ�"�Y���7� ��YԜ������ �^J̘�v����+X�X���M��і�� K��H��*V��N: �ZԋT�|�SCBz�����_PYeM� �v����o���FO3�*XAɎ��u�lz_m"�����D�ĈJ���A�$��.��*��x'�* �BU�i��Y��d�m�,�$�z�9l�f[�w>��u��#ud����$�SR��}8%�������_��~-�y/�5b|Ӭ�S�Jay���ձ}���v�7�L9��YtQ�ѯ6Cz�)bi|E�eY�Waa�}y�V~v��E�:�R*<��)�V� ��rV��u)�6U`a5Ͳm�9w6����#ַ߉�����v���^"#BdV]�|o����Y�ޮ�Aȣ��LU���ߏn»M�썰��`f�>P3pE����Ja�&���۵�m^u-)[��NF�qJ��G�� e����[�����<�\�8(s8��!�9�ԛZ��up��ї�rݯ����<�9b̗��LK�)0d��GdRA��Ϸ�X���3k�����(tKp(������a��l�b���hG���i��\��g�r�SЁT���Q3�I��~��Q�}�e8�_�3ЏJ�U/���m�D �T%eh����c�`1�RܱAsA�쁙O��ኋ�\����+�� �kY�Ò��&�r%�᭳,���G�U%�=�Z�ߞ��C�Xn�<��@�ʸ�8a}&�1�]9_�_�|�aZXxI�+lՑ�b����˧�I������]�8�9���s�����l&0��Irz����߯Oԝ]O�r�# =���]e9��S_>%~p'/�W��j���z "�EMs<]Oת�cz}���-ؔo.�;7�p�0���t���[+Gm�p���H��*2��K�u��+������4+$Umt��E�|�xz��fú���kq���xn#\e�kP�� ;�$aäQhy|�� �!�Wr�� Q�4�>3�0Z/����V�+�����)!�����T�}�cv�2!3�1��v��䦁?��ソۃP@�vi�A�'pf�ij��Nj������Cա�dN]$S�K��7��~NO �(���)z��������$�1��v�ǔ�>�6������,�9�6>Mr%�� ����Q۹˫�V@�a�z�%�{�]d'�z��-�K�4�A�����%m��@b/��tT������V<rvE���y��Q$���}OK�.�=�:\�&]��a�u(����_����R
Static task
static1
Behavioral task
behavioral1
Sample
a937189b1b7cdee8530da595b96f5a04_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a937189b1b7cdee8530da595b96f5a04_JaffaCakes118
-
Size
4.9MB
-
MD5
a937189b1b7cdee8530da595b96f5a04
-
SHA1
f2dc347f463951f0495428bbbaa9bf1519c04f1e
-
SHA256
5ba6d5c01645ded97555ecf969a3e1c947d17b95dfcd66af13414cf389693984
-
SHA512
66d9da9144994e538a8fd4ecaaaf630ddc266590e73e093f85ec0436746274efced799ce7e79e4bed9ce5f9640c1dc4c2e4850e7bdaa02a0bb629ffbe92d4bcc
-
SSDEEP
98304:kFUwYA8C+hC/ewI7BMOkeGpTn/4AYRRDjJ:tdC+h/y5s7RRD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a937189b1b7cdee8530da595b96f5a04_JaffaCakes118
Files
-
a937189b1b7cdee8530da595b96f5a04_JaffaCakes118.exe windows:4 windows x86 arch:x86
d926c695885a64d68a5bc893da90ed51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
psapi
GetModuleFileNameExA
kernel32
IsDebuggerPresent
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
DialogBoxParamA
Exports
Exports
Sections
.text Size: - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx0 Size: 272KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx1 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx2 Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 272KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ