]O�6.┵����p���S�y,H�a�,��'[*�é��MY:��?�ix�b�w������H�^��~�~�q!���#��+��A ���0*���]���F�u�����Ʋe��%Z�Oe��R�yH���A��Ç��v���3�, �^���.��x��x7 �;F{�y�����K,\�J/ /�f.á�_��ܞ)܄nN% ���B���Nw"���`�q��9w1:�"�8���z��S�� =�%aV��b��Yԑ� �zru��]��WW��\��W�3�5G�ھ�5��:�;���Y&���|�B�:R���(�t�/n:�rs����~'Ȋ�h�n>����]�� WNU�qU2���`�g6H`.�r)`}l[�w���p[t��,<@���ag4e7�l���Y��UU[x��&�6��5�/�J�h���d<:ߨqq�_�H��a���%�����u؍����@�װ�9.Z#H}*��F�z`�y=P�u�/���P�~��@�'i=u ��-G�X��1D����;��ѹ����Q�ь=�t��_��V������ʱ7b�z�ap����V��K��Ua~CZ����6�K����h�3�E��n`a7Q_zMY���.`� ��~q8:�;6���>���rr$nmU�!�y4����"F�k4]͠z<� �o)@H�(����&J��f���<p���&�ugJQ�9H�Ϟq:���0G�+�We���0�_vL5������;��e�T%�W��C��X���e+���v7����F�`���W3�b���n�2�N��<I��hԖX0��ʫ�k�`X�d��5�H�&>�����Ϳ^�>�lP�B�2�T��#���UU�l�e�::�ٺ\��� ����j�2)!&�+S���>)�>����m���#d��,]x�+2�/t���P��Ʀpd�h���0~Խ��Q�~I��c� �@�.�%0S�q(���l��,�Wft��P�N� L�+�Fq����>�g��Hx��W@��Es�O�����sCx$rd<@ ���2�oD�[��7��>y�֩]ŨoǤ�\)���œ����x/Z���4{�?4�zك*�y �m ��p� ��zG��O�@�B������9x�<2��nZQ`���j��[zMS�����"�^24iH�X�C��T>{D0���Y7b�)�,�Y�-,��;��ޙ��i< ���z_�ч����HW�p�E=A.1���'��?�ۜ�����0��"<Og4�Iݨv��2CcK���H�4��Ig0��iB�����P�b΅w~$p|t� �h}��Ŝ���0KTni�����D6��u�r��n����4N�2J[��$k����82�.����zF�P(j+��!b�:]6~�H��{(x�9*��K.'��Lb�Gӻ��?i6�M�R���$��qQk)�O�A�N����G��*:�M���`�C^N7� u����|sF�.#O���е?K�F���Я���� 4�x�r�a�.9H��^��w��ȗ6��1��7� ��o�O4|D'd��~��M�z��~�H�7ӥ#1���#��;���U6���;�>���Ъy�*@ꪈh#��3dz�������p��Yy��q�?�7�I]�/�T�B3�핏A<�����rZMlZ�V�-����Q��pj�~Ѯ�5Q�@S¦E� A_�-Q-�iw�PN9H�#9��ҷ!��2�.&Y��5h���n�M�g4̸���r����z�xA���S���c��D;�d��$H�ty@Vi����+��%�5�}�F˧p��8��&q�m�ß���y���-��вlSw��Q�*������DZƢ��]wIӨ3h�.X{���l�J�an���g4�n���O���#��~�Xg'_���=%&V�*%fZXq`�@�{k0����e��B�>a��XkD��[ӯ+"��D� ͢��^� kͶ�*�=��h������9��1�|ѪV�G��hc��3�������%�ӕ֎`�M�ɎP;���xY�����'�e7E��[�.|��ͪ�d�&H�%6�Á��E3t��^� ���O��Z��$ʂ�~;�o^�u��ˈ�n}�ٹMxI�\0t��.x�A�zڙE�JmN^��T�1�����35Eb�8��,��!(�b�/&�U~������۪PT�ڙ�"�qW&Ea��#Ѩ^��C�6!�\R>��t��S���b3xGh�`qʋ|[��0$t�GI�o�_�T&v@?��lY��*u ��pC�G� ,��%�ٻQ�T��ϰ���� ��꛴�$,(5��s#�h��RN/3�5}@z~�j���Xj�~J� ���N�D�?s#���~�wM!X�P����#sm �}>��t'ǧ;� ��qg��`�h�R U��)ɱde|��+��,�zg���4c�V�\r�A���uHM����.���o� ��?ټY��8���yz8>ow�_ 8��D��{�r�J,��a��H�b��* V`���߸�E`Ϧ��AM�;W�!%g��f�./�>�L�ʼn�R�}6j��|��xH�Dn�����[¿��{�$��G*oX>�`Q 4���y�,Y��v��_{�0A^��m?�|ފ5:��;pshH9������=���'i���n���C�_/���+j��aq#�.rHi �����aɌ$���ɖ�q\�i��>ի�T�?-�xH�颋xM��9��q��_�<�������㭿�ͳ�!v��nSN��f�=�k�YK�za�9u4���\�r��˹��.p��[�)������"��O���A����/e�p����}P_�� {N����F^,��K#)�Z��Q㋖�z֠笙B���>\P���a2*\ԷIRF��9����T@�M�Z�MݸE�nX�q+ >n�gc�M)\o��K��v1�����[M9�7�7��#�r��I3��-�t���3�e~s�-Gض�dK\����꤀z$�8;��(K�ͩpM&H�y"b^���R��6�sR�<��9������ؼtQ䷷�&�\���WCdT!1��R�w��ʱ�����|��1�VD�uu]�}<�s�`���+�ذH}��'+ ˇ
Static task
static1
Behavioral task
behavioral1
Sample
b099ed2ff1eb20043e2ed6bdff26f17a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b099ed2ff1eb20043e2ed6bdff26f17a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b099ed2ff1eb20043e2ed6bdff26f17a_JaffaCakes118
-
Size
732KB
-
MD5
b099ed2ff1eb20043e2ed6bdff26f17a
-
SHA1
5c42a92f128b0e59e3ffe64cb0b592208c48329d
-
SHA256
b173aae3ccfb8fd0ef8b5db186af7768a1f439be1931ad82bfb9891091b609f1
-
SHA512
d75b2936f180374f83a1415a054123de3913372ff477a541f0f1ef4db5e08d08b1f8bbe8711df6760094dacd9326976da537c591fb76c3dd6a72694979bd9216
-
SSDEEP
12288:iRsOsbSV0pRTblAV2cJjhEObIOZST3ea+FNIcXN5H7iRjtiNZyijMw:iobphlAVF9sOo2FGg5H7StiNZVjn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b099ed2ff1eb20043e2ed6bdff26f17a_JaffaCakes118
Files
-
b099ed2ff1eb20043e2ed6bdff26f17a_JaffaCakes118.exe windows:4 windows x86 arch:x86
59037b7c010c360a4862d476cedcd682
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord685
user32
MessageBoxA
kernel32
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
Exports
Exports
Sections
.text Size: - Virtual size: 663KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 434KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.se0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.se1 Size: 720KB - Virtual size: 717KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE