�6�ܳ���ۭ1�X�S �<�=9��~e��X��::��c��Y�^e�O`Cxw#�ˡ��p[�����\o��-���(���U�,�\��/y�h��+ǖ��Ú��9��^���k�c�;B��0�s�~���+Z���5����2��R�uV��e��v��"�O�?�����͗4�t[�Ǩ��\I3Ą��&a!À��5�?��"#9��KX���(G��9�9k_�N�D�r�{��9>,a�$�l�y�y�Wc:��&6�>d�w=��D��&̃�t��B� _�ET���4a���^��*NN)D��9�:�%��f_�ʊ��ɴ&o����C1dj�d����S�Ovҙ��(.�2�(�F`�rdÏ�\��~ �!��>=�"��֖�cw���nV����dg:p������+L�K�Nl϶b��xr]��&�g��>��3�s��^P�X����HW�(ߍ��[k��y�Q �ʧ����Xu�ƫ�P9I��fY�Jx46홣P�-��r�����삶�a�Ufx�D�j7��ˠ�G�h�0Ƙ|$��ŷ^ C�� �p�桏Y�W㺾"D[*��A��S���7�(��h�������㡵3P[R��H���������2�\I2��E��`$O0��O����?����M4�k���9>����/.�*<=V�����u�NOQW(�[V�,@��?+n���D� ym)S"<���ǃӅ����H���K����R�����8����td����0�J�M�))�V@�M\�&�IR}3��+�`>_��.��U��'��)4�� �'}�@�n��|L2eƂw]M�1T>W]g���e(�'�Շ���o�º|�}3��H_w���{>�Ft^��-�F�2b*��{�Fa�Nr��p��=<�����)+y�B\���L0�4u����I�� d"� ����[?�__��%�y���Y��/�O;��w*.�ʥ<�߆��qq���#s��~Yj-��,vs�TV�8�t7��N?]��&�|�_�̅{�W�������J����yq(�o�Z�P��/����_��\�c��Jq��c�:e�&����~x�2�n9�pV��~�l&��@H�띃�'�J��XE9r�?�����`u?���*�쎬l�)R>�ʊ�W&�W5c⑈�q_oegBWdDל���E�!wd�1/�Pe]�S�.n��k|������}{T�T�v�P���8����Q[;z���*z��9j�,�X�pw���v�A������|�-|�vJ�d��ϔ� �`�k��(�m�~_��ƿ�Vp��Y�1�@e*[��S4mlw��ؒj��f$v��X�1�ae�������y˂�q]�'e�̶9�a��0����m�A��q��|ϓ0�y�Y�����m�s��k3�io�E���<�71Q���%zD�W��*�a��l�F=���#4*�`�=���j��w�*\�I�z4���T %��; y�抈]Lv�D�H���bT�#>[�!� ��F]�q�+T�F��(���#�*�5�{�L��;���*/��sE���u%1∖ؽ/��0�,��Z�d����Yi{�R0y����vLZ��D����h���R��>��R6ቶ�-��3^+`��3y����^5Qd�����o��Ȩ������WP�d��)�Y�Ƈ �+���&�b�=���'\3�As:�2�9����#��.�� " ������o}v��h�A0Dѵ�-���[e�@k�5�ɨҹ$ki��t�~-�ۼ���X���*od�h� �܈Z�`�(N� 7߈���_��Ŭ��H`�@x����1���Y��ĵ7�B�ф_�{�*ae� y,��w����S��Q��^� ��˘���m��u����c��f���2'�\QR�Q��-L��b٩�5D')�8Mf�����yʷͥ�K@�����������<l�I�����g��7pL4NG��v�V��g�ɰ���V������q1��( uҭr���PEN�������e�N'�d7�SJk��F�zT��h{Ÿ���3Q�I_��e=Cۗ>.J��'�ET�/w[Si���D�J��Y�#�e1�c^gNF��s7O��Hf77����㤟��3DJHh}�ŀ�b*z�/]�SP2Kvve;���?ɦ�O}��� �R��"�[�����E.�U.���!̫��Ү����2�A-$��*��l~�����,@K��L�ݻ十���8��+WR��_{��L'�&��jfLE�yH<�51��in���\��&ax/�_'�A$)#�&��,�~�s�*y��֤䝓(Uø%�SJXL"��`{��mf\�hS�~~�]S�dw�U`�XSf;�Qw� �0Қ�Q-� t��}�ǿ� ���G�;�Ts�Hlh�K���Єn�Z��Ƕ�jaL��P�)< �(��z4.!��w!1tA����aW��X��;��`�b����R=�SSڪ��)!/�� *����I00�[���( F�b3=��V�R�XAU�C��U0�p�v��L6���u5ۺK��>��<|���&�z������0��pb�i��+���! �� Ul�ݾe?�P�ì�C��4�?��u��:���vG"nA�CK����Jj�Af�����h�� ��w����71m�m���j����J�}�|�Rْ�7�R{�[|��k*jK7�:����S����V|��oC�f ��\�X9�iqф�a*�/�S�_da��,/�]OEN�0mM�����sz!�i�2�p�҅7lg�a9��B-)ir�ɻ\��&߃G<��|t�Y�x"vL;}��"3�k��$G^��A�u!���z�4m�}Q���j6ɘJ%aj�>sD= �8�2�-Xp+$�J��N�˺,�!Ĥڙb�fo���O5]��:G!X��h2���飇�F�i�0�C,�f��n���DL������\1���hV�~��k�mC}a�6LC�� H#D�W��'���2ޙ����8�U�����j���<o)��L▏*�c�>k�o�� ����P=!=ӫ��Dذ�∆}��������11k�)� |�T=�`��
Static task
static1
Behavioral task
behavioral1
Sample
b743677e779de5b11d6208a610e6b468_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b743677e779de5b11d6208a610e6b468_JaffaCakes118
-
Size
751KB
-
MD5
b743677e779de5b11d6208a610e6b468
-
SHA1
d8255d9353921ec200e9b0ce92b4b80ece39d9be
-
SHA256
047dc5ede388b8744d61782bea7e8f42b69044424730d6b7aa63cd7f51dbaacf
-
SHA512
5542ee54bf7af8a21aa10792106f6b3b611d0419a08cdc1d8da58ff39ecda93fc1474fd1c554df8cfe2e4e4d435ff3659dff7b75ecaca682357d2f333acae334
-
SSDEEP
12288:f0a9xF2xng6R3PNGLxe0DiZnWrCT3MhK4KtLK1b+aeAtpVxag1bvgx6NdC62kV:f0a9xQdg6R3PCx7DidtTGK4KtLK1TN1a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b743677e779de5b11d6208a610e6b468_JaffaCakes118
Files
-
b743677e779de5b11d6208a610e6b468_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.textbss Size: - Virtual size: 812KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 518KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 621B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ