b $1�����7�j /���9<ơ��쩔��h�R��\W<�(7�V�{2�{�ӝ6<�,~Q,SM��(��Wз��ݚ%$נ|��E��Y�˩�_�W~��m���y:Sכ/�\�Qd�a�����6�������kp(J*����谫�@$gv��2N"��Uy�BH�P�|�WU���;N��3�/��L(B߅ۣ$��J�aj�Gv{�X���9 <g���=��a��<h@��d-|I�n�Ă �y�q�K0fFAn�({����јcy�*��;�5�/����!~'�Y���db{Ak?�X]��C��7!m�5J�'��T�������|���j�W�r8.�.��|�{���A;L�����Ϧ���8�>E ��F�d��OAC�+��S��0�%�GR�3����?2�`>ĎU����I�pTu�^G���Քo�8���̉�;l���Ԧ"�͕���g�=9�`���:������t�`dėH�����f0��>�*��u�~�?Dx���t���u^u,�[��[���p6K/�zVO������S��=�� �G�v-�n��6�l<ƥ�#�m$�uEe��%��筬tg��k��s�)�D�;P)����̨ ʜ��f����H�w����HM�#> U-A��x�<S_���zX��i���0�h+3���b����� @���wo���S���u�*�י��m�j��F�S�c'��N�S��gR��C����3�;b$�i�1����zA�/�![�������̎A������z�W�Y�S�^����7�O�r�x����f��<9p�|^��y���Ȍ����P熮����r-HfV�ҍ�����U���jo?S��BPFu�"�:t_裉��$�n-Pyb��Z/`��l���_���J�|�ˡhw��j��ؾۘY�n)�zj�@�bP�a�+��\&1�~�������2~�Vh�i���\9^��-, ^-��ݺJK��z.z�lx��V���֡g�p�l8$8t2�����qP��D�`Wa>�3��������E�'�o����o��V\������$��B�����=h��b3_�>�b��uڱ�ݶԘC��X.v���Z�|��(�����M8q� ���9Q�[��B�}�]�c^]f8N>�l���nB�fw��B9v�o����F��=���Ŷ �<ܨW�M�X;���l��_�2j��[�V�o����X:��G��h'���:!��F�S�B�+3b��[[nXk��`������3�[���A�6�=md7I����Sm�D�Y�=�9k���BOM}��]3�Z0Yl��{R�U,YG �~ñT��%[�1��׀t�DJ�d���W!��4_��ٮ�� �z ��vi��Ұ�k=�ք`xy$��*J^ �w���}��o"�s�?/A���p�L+l5�&9ؚZ��\j;��������ö<r���ajK��W��$��2���k[զoI`o��t8d�}�K���#}�AK�q�_g.��� �n��L"&�JU���Aa����bmħ����R�� �����q��Lh͋���WpVb;�cV >��~����Nc�8���e!`,�ҔX�8����[����s��F�(d�����g�X����p�9V�W< �c�$w��[E���|��xN��ya��"6��tܲ+�|D%��Z�{������"*�q=`<��65�Q���č�\�I'�F�8���$a~����Z�:�Y8���-i�S�d式������o4G�V.�[N��`q��T(���Q), �G��~��N=td�A���z�DՑ����՚*fVP%� �f�ix¶߉�nZ<퍔8���M���:��iO�7�۱�%���pm9�rb�0�%�\�LJ�� ��?0���э�"���w��F��Mr��@ ��(��Y�{Tv]��6��S��u���#��L��H�w#/�]�]ᆽ>�fʆ1���&�^���N!j���(��<�r9�͖��iC"��^W|u��ㆈ M}�ù�߮j�`�/3����!}���Ǻ�wO1�*p�CǴ�=���#o����e7ߤ)µ��B ��!���RZ�0Z�k��P�'��f����~^�&uW(כ�d�����d�_�Up� ������m���Z$�����wLog��t-~JT�L��<�[�cڣ�����^1D�˱�P)��DnS��� �P�ƶ��_֢����3#��l�ns]���oͨ)�,i�N|C~�RM7+�-�a-��+�h�c������U>�>>�<%�b,�����D��=�mv gX�ay6��/���W��b9�+�_?p���0�b�֕��q��-/\�t=!�Fh߯�V�#�P�P���d�,"��?��1��x���ā5k3��Ⱦ��`����3b1���H|@D� ��H2m�����Hߒ��R4r����p���o���������(:ѧ۵���q58�ĵ���q*d�L{T�ѵ&V�Q|-��iB{|���N����䩃~���|�:� �CLp��IyQWVnƴy8�p������D���Lؽ�r��רrZ�;Zۭjf�^K�1�E�n@�e0��Cܓ��cᷕV��NVﶾ$��ܠ���? ���D�Yڠ�2Vp���7�B4��j?d$P-Z��0區�М0��%�?� 5FW���1�9��a�P輼|��Pl]q6}o0� P��=K���=��������pk6o|�K��������#Zxű�Qqt�$-���#��4�����x���tg�CS��s�.C�Q?����WH��b��L�8g�Qvzou�]�uZ���3��+���`+Fs�8,{by�-�� �XDZ��MJ1���[^��G���~̿)���%_��^R���v��a���um�~mj����%��m�����µ�h �u �֒��F:�o��}�ZF�c�C��T@I�ḳN�������O.� �О_0Q��QT��H��.�����<O�ֳv����R��m�P"u�P7����0k
Static task
static1
Behavioral task
behavioral1
Sample
cf2f938e7dc610d70eee3dccba5f299a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf2f938e7dc610d70eee3dccba5f299a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf2f938e7dc610d70eee3dccba5f299a_JaffaCakes118
-
Size
4.8MB
-
MD5
cf2f938e7dc610d70eee3dccba5f299a
-
SHA1
421bcf4a6df9498efe54c32c13932ad6b88306a0
-
SHA256
8d4ae4bde695abbb7bde924497cb77db7078e70ff2c4aedf395b3df9892f7244
-
SHA512
4c861acd08f2d11e2126aff8c75d54add2e2d4d85c78be94df8994f9e239c2feccace280813186020ed9c5ce4b86d371416f69ae7eb143c0422b95b644c6c7e1
-
SSDEEP
49152:6Ef6aAkYD8EJV7MUcFbXjwbmucKaDrRuKXBT6IcRe0J7YrMZYluq:6Ef6aAkYD8y9MUQwbmpKwrRVoI2Yluq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf2f938e7dc610d70eee3dccba5f299a_JaffaCakes118
Files
-
cf2f938e7dc610d70eee3dccba5f299a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 768KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 524KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 724KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�O�� Size: 568KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE