�E���c�E��>��!N�X#��T�;�ڈ��+O?�����@������ߧm|q;���d�C�`]"�m��dU�J����U�Ffp���W���X���I���$% �&���{��8�C�(��6���a�$��1�]��k�_��J�3VƳ�1�ڃ�7 �i)>s:]r��3�I�N1B|�ZP����J��!@)P�S�z�����3f՟f\1��H_��FoC��$��g��j���YO�i��T��3�h5�r<�$4"���m6����>�]�� ���_�C�� ��؋_1t�Y�!�U)An�L�x�K{J�ؽb&{�Uo{z��|��&%�`�];|� 2����j�� ��̯�Tj�MB�J��n�AV�%��roK]��J���7�$'C���PK�[��l(�b�_UI����z�xgc�ie�y�� ̀�q�8`"�w���BH�fv�E:���iPA�#*��U����� ���)O�h�.���GDގ|�� o�����QI��I�5(��L��c�����AdRJwlQ�l˺���<�i�X��Ө}��ag�<C���e�YtO�'�S���0$O��{��۱�7Ϟ/$T@�~�v���So�P��]3��}lSRxi�GO^���܇�_?9�3�60�8�Ö{��q�9oE#������r����ߢB�� )��JO���Pg�b9�,�9���2KsO r�$<�m� G�4���ކ�Jj��QgF�dF�y������+�壂M�lQ f=���G�����Œz��,i�睈Hb�������U����|IC� ��p�!��?�k���E�1w>ߗW���D����0�aKi�%(E)���`���ɸ����߱'��êUv $k�\8���l�Yj�4&t���w�lBc��_2E�G�I錨���Nچ��m���F��.���>����I����� ��C)��k8��Ő�~�G���rmS��SB�p�����.͔=zU.�TJ���ɟ����@I������R E�݃4W7KD����3\|�(# ��|4��b�076 /�Wc�6Z ��(������T��5�\A=���(Y�F�I[�H�*��q���}袙�4Nt*K@Q�O('��.���Ǜ�ZȂE@�$QPwf������Z��W3��_O[':��П�rf,����[�&�W��A�ooB2d�?�*!��U��`��]Y�D���Q�Y�d�n�"X�ѫ�����[��j�D��\#�����*/2ܦC�U��Ҷ��S�N�EڣO:��%��wP��F��B<��+9ъ_5ݢPn� q85P�xn>�i���_[;�J�r�J�`��`=A��r&��tW}x?,�#��/�>�c�A������=�h���P�c)��&��r�,��$���K����w�x��� �oF#i���6`�,��<=�#_�� մ����ɥ��K����r'��6�)fW�!�L"5w��cc�me�G��)��2�K�^���WP�FBQ0 9�$˵�^[>��9� )��{����Jdx��������=���F[&�<Ɇ0nq��e� ���+�WyѶ�2�#��Fp���_�,D �w���M6�m�R��2r9��\��0���5���D=��ȩ��ΪJ�`���1�f�l��r�w*�I���e:�*A-���u�n��� �"_���]n8;�V��A����-�"Qɝ�7o%�j_���iŜȢ]�A�������xH�M�v�y@�ۣ��Mkr��*��3_��>�e[�B���6hEDK�?仹����&��n�u�A!ޮM�mfr�����/ʴ���, ���}���i`�1�xh��2�,o2'� �mK������b�i��+���OKt� �$MM�A��>��%i��Jk�m(�?���&��|I䓒i�<se�A����SY���$\��Ⱦ+ڏ`B���pT|]�07"�v${m��qĔ�d%�0=�Ya �<�rT��ÚX�#��X����ڭ�#6:4r�q�]���w��;5� �����5�s-����&���$~�s482K�����a6�@��?N���沃�9���J��K��{�^�ه��X�nRA��#B?���+K.{.��� {0¯ �,X%s��OH�uҒ�[��aس6p/�����5��?l�~����.����������n��(���-��%�:%Ki�ևI��T�����`̐9�s5.&W����Ed�J]v�9ELKtŦ�pJ��1z`|���5���K&���m�Y` b��;�Q\���p�^�-�֠|'ttșF�K���CGi�A�N��Z(6����г�,Bɥ@ȑ�"�)���2�<�(m5q����a���)(���G����k$�2��I \u)��{:\i�c�O �'��hB�ϗ����P��}�9����<��ۿ1˴1����� ���!�Iy>��VҼ�:�2��m���c�3��O2��18����!9�YWĒās��������"��,^�;e�K{�F,$7���a�M�|�H��g��8P��P�1;(6cX�4]C�!03�P�x|a��7�KP�4]�,hs�C]����`h�7.]PLnd��⤱�Az�q�m�r�s �1`��=�G��?(ԌT�&�1w�������y+�Q������U���u1�!�c�A����(�m0����G[e`:X[����{���A�[~� ��5ꤞh^� �>�,��"AЕAQ�Ù&�a ��Abl�Zr���n3���ta >ʯ$߷�%�Ċ3Ʊ��Ҍ-����:06w�5i�,Y��!����Rfq�2��[�`6�"p����8};q^!>m��ǯ+o�c�RHN��I�H�1._)�˥)"Do������� h#j��MPyjBq3�XA$�8�wy���aX2I�Ԃ�t�ip>w5��N�r���{d�� wQ�!H;��we��H��q>F<��I���2���c��≴s̃1�O�q�7�O%O���-7j}*k�@�=Sl���ܚ�����!�b��Ph��ȃ15�Ģ�";�]�3�C�������~��l �C���S�
Static task
static1
Behavioral task
behavioral1
Sample
b53e5f6bd8decd80b51fa19dc65226df_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b53e5f6bd8decd80b51fa19dc65226df_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b53e5f6bd8decd80b51fa19dc65226df_JaffaCakes118
-
Size
74KB
-
MD5
b53e5f6bd8decd80b51fa19dc65226df
-
SHA1
b2922b69f4d1141e755e3d216d350b0436c79cfa
-
SHA256
c77463fc3af267675957daf2f48aab826b93399e206140fde71ded694ccf0ec3
-
SHA512
072dddd537cb8d751d0d11d92bf913aa9db9b13a17d7e48346b6703a8357427b4bcdcbb8ce8d53dc3150b2c2896d1a851afa29bc0a8ac045a0ead5d8f36c10ba
-
SSDEEP
1536:G3zWmmT6oGE+2phNLwapNYZGvxpB/ranYri4aZfJIRyfq1qNrS6LoL37Up:G3zDmT6X2pjRYZcxpcYrYZfJHfq16rSy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b53e5f6bd8decd80b51fa19dc65226df_JaffaCakes118
Files
-
b53e5f6bd8decd80b51fa19dc65226df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE