6�gk!�*��ۜ�ۇe�����!:��k�sdV1�6?��H*&ɒ���K�����������-�.83��uށ��BH1�F�q)z����9Ő'��3��\D+�����4��ό��d��jRR/�Y��C+C�rݹ���F�����1M�~�<i1s.�.����|y@�����Zj�Ƴ=�����ˁ�B2מS���&� ����.��e5�֒�A4�f�<:��g6��qK���u��a3Ĝ����|����Ɩm�잏M���^��y�&,[�)'����a���w���r��!^D���8��Օ����;J/E<BW�As6�"ē��v;���8��_��N�x�������ْӯ��-��� eE�����RͰ:noN�A�:�3{&����ʾa�G��Ech�*Ϻ�5u7�(��!���5���v2������ O�ՕK�e=hՍ�5e vD32��R�qޚ�\}�u���}�G�ˋ� *�;Y�O�͒�R.���%���t�<�,��ՅT�P�;}���P��c�N�'ExD#��������4k�������_�Ò?�y]���9���ES����4�BR��4ؕ�k+�Cw����׀� �`��E�B^��8�H�]8��~�ƿ�m�l���5�x�ZDU<�u̱�m�, :���lJiR���Fth���#�?M�� +v}���xU�,��#c!RI���q\�6cBK*#ɗC����x�sT������d���[��P�&�z�!ﺥ�#��bո8�N�g���آK�)L<�Z�qP�ˎ�g_eoo�K�c�V�G��O��d5^�|$A*��=FO͟<Q��&2|g���#�#��z �������@�Ǽ�t�0��SJ��`�?�>���?`9��f ���_\q�5��g2v�����f��9�}*B��}�*�g)����¬��L�!�\��b�J�;t~���`�;7d)��GMxYR8��[�s}�N����@{�p0�.lh�qa��横-O}����G��M�7. d�U͝`���`��e�ߕG*Z��M��;��>�� �����s�}$��azC�})d��Hz��Qh#���v��x�ĭ���[�%7M����p1)�X+s�[b ^<����[������Wc,;b�]� ��0�Z]g!�Y&Ma������/c�v^6m��/y!D�Y!�j�������"���4��Mf�Cc�(�C�}h��2x�C5�R�q��XDʢ�ڱ0k)"v�Ӥ���~��8~� �]2������F�4_Eubc�/�Q��f���,�-ur[�Xu�)����=nT�(R ���ua���Q�) r�aI�y6-iv��0�Kۻ�3�J�Wd�@�HŨ�Y��}������"��@�:�7�fQ�֕���u�L��j��y穋�$�0�'0��Տ�gv������0���h�@��>}����*H��D���G �QDR�|.�W�I�,B��-���������w\�lerG��@���OAx�M��M��eak^�i9r�ԥt�3C_ϖ�h? j "�ו�T�����s�?j�VXTU�����S ��/���c���R}Il���p^3�OBz<�B��'2�h�O�����A�})ʊ@ĎxǸ��"���KY�:W�l �S�gݦ��"��Ⱦ�X*\�>��V�,T��Ge܂���L9F{j�b4�ۮO�!�d64���ؽ:ߦ�b�楮��_e��K�����̮���ã�!� x) ��ؼ��c�i����~"����bLP9�UJ9\�)�%]��v'�W2�W�)0)�i�F���i8]�^�}���})�^�;(����qf9HV�N?��� ;-'����~�&i3���s'�*t�ԭd}�$��ev�՚=�.Ш�^�[&��R����ķZ��#/�]$��O��!�}�ܪR-���"��5K���d���g�N�~�ڏ~�v~^�>^x�T��?����X占N䨷�\�#H�k�0�C��U�ӻ���ע�~425����&㩉Mu 7��~H��1����`.�p�g��LGY�}�Ճ���Ȝ+vО���!}T��*'��ϊ�l����R~�K��~�� N~����U��Ny\n���~�!ްG�l,��g�:?���;��^(8��W�����5��Re�.*M�����VR�`�/$�X 6�,���sk���ע��+��&��2M�<�����߀��π����ϮҞ�@-B^<��Q� ��o8^#r�j����<X����� ��9�Y��}UY����D�I[-S%�.�520�T�"����8�W�.t$#���I�� 9�+�9>��槳^����ݬ�[J��8wĮ^ͻ���T�=m�ɜ�o�Y5|~:�T������V�lIo .P�/�����!�XM���P�����R����f$�e2�7Il�N�!Օ�U[��n���h�"B��ѓ���Ű\b�'�/��oD$(k"�X�N\�F!��zN����Ű1���Gİt*_����8�g�a?o���oX �۲�w��sH���ip�ej��`b.��'�TЬ�܌f����o�j� `U~3��y�9%��?�8ɖ$D�]B�`���x���L�Emʺ�2^��'�� JR�n/ǐ�n8���V���j�Lͥ|:��C�b���R�����1���.U���8�B埓P�k��\7�O����4�:2m�.����nld�4@{�Զ��Ɨ�-� nٵ�w�a�a�zVؖ�0��=El��b�3�P9?���l>�<�V{�_PI\�0Y��f/^�|�b��5�{nL�ưr,��_���Lf}�Fm��2C�����R���_/�1T����� y����kNI�i2�I G0\A�~�-�,��-��{�6�B����ў�.���&���t��؎��[n�|�7β`(3��}!Hd ��d�A�FIK�Y`���*���k�5���tu��O����?ڑX�hbo�~�?ߙE��-�� �om�;���ߝ�R��j��@�vE��g����\2�@�Y#����$���M AË.ms��B �r�D��
Static task
static1
Behavioral task
behavioral1
Sample
b588e5268fc1a4ec6dd1dd07b4aea7da_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b588e5268fc1a4ec6dd1dd07b4aea7da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b588e5268fc1a4ec6dd1dd07b4aea7da_JaffaCakes118
-
Size
656KB
-
MD5
b588e5268fc1a4ec6dd1dd07b4aea7da
-
SHA1
6cfcd5fecf234575d8c2f0a311c9686f8047ab8f
-
SHA256
11f7bc1490bf3b397ab480e997a2a75f85459f8d28de7e8b75909b6215fb6bff
-
SHA512
89d4ba2dff10b0fc723805711313cf54cb258d9896bd9272a6792d4b610526a4ac59c6c45325cf0391e81276321c4de53b956af71f31545cf788cb8f92268d35
-
SSDEEP
6144:wo/S7MVmavq1kaxkRI8rSeLY8BN7yL0N7yL:bS7Mj+k/I8rS6Yi7yk7y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b588e5268fc1a4ec6dd1dd07b4aea7da_JaffaCakes118
Files
-
b588e5268fc1a4ec6dd1dd07b4aea7da_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: 415KB - Virtual size: 415KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 244B - Virtual size: 437B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE