G755I�Ɠe��Ҹ�m�i؆u���<����v�ßF�8!���5�"2K��naj�҄��ݝp�KcS����8w�H�����(E�(^���~Ҥ��"S��p���Y��9Z��4� 2���G5�o��i5��Z�xu���w�ܩҚ��F��~�Ǘ�>�@��?M�5�]��w��(�c�|;���UaHCe��B��<��aN��.�|K��*�����~�D����O�bD�W�[ ��m����=<K�Ɗ�Ѽ�P�$z"O���B��7D4 n�Ֆ��*��5�w =]�~�z؍�z��.�������D�u ��Yy��s4�K��ƣi�4?�� ����0gؖ���&�^%<g[����������HGH`\��%��)NڃC~E^r!�����bܢn����P��W����s��7�W�ٓBo�=�����{��O`N�Z�V�������*͞7�"�@| ���Op:�vt��[t�Ƥ$�11D��p��P�ςQLm3#;�u�8\��an+Q��[Iូ)�������R��Ī��C���� �D���r���JFq�# �<P*��X�Q�q� ��[�R/���`p�S2�g{�|Ԙ �L���A|����F��u��`EN�Ω����*$L����������0�|�w��8�_��Y�(k��`��h���_�� .ǰ��B���W�d1���J�Z�lK����ECl�zB��h�����rw1e3���@GZvY��>WM��|�@7J� lE 5��k�Y�������������%�����m�azq9/艌 *ꈣ|�FJ2����0�����#�Dݻ����a$[ c���E@�M��^$�����Q������������`�}�scc������ผ���������P�������R�<�"��3�9�R�m ���@�`�Ƞ��Ovj���D{=�Ĭ�\��@�)�Hͣe�z[!���'�h ��#+�t��P_����B}���8�E�� ��o�u�7B�%�X: ��:^�5[;w���d��Fs��:d4_^������>-���>���i�4����ǝB��|��9]��\5��E�udR��dռ��갋@�2�D���Z d��ZŐ��Y�PL�F۳��bI�9Z�WpKF@�zS����9.���a�Z85y�s��~x�F����+}V�����2[�����,_$+*k�?9r�z��]�in ���@=��rn�Av��q�|���/=�c-�>��r)5Rз�n�� m5Fe)�3}�K�*-D����`g�[�} TP|��LS@�K�����J9"����Cc9�ҙ-Y���v��vXaQ�����ՠT�y bX�E����W�.tbZ���9E@";!�܈o�����6k�x_�75]���7��m�d���p���?�o'�+vf�"_�b~�����c�My�=���J����/..�]�u����������d��%U��ʗx���n�!�I�%�`���묫 Y�z���哛�"�R�_u�]7�� ţCM[�v&N��&���k�yL���U���l4PKsr�LL�Q�h�2}���2��i��:RqC��x��V��Zk���9n�,.�m�z#l�>��1ʐ:�5�З�4>X8�\�A���Tn�����-���86_� _�z���T� ��쫈�Q����;��U2I��)Ē�q��=?Q�(�+�zћ��w �N|�a��Mm!��#wR��l@���.�=����Ÿ��#n��٢���^�ic�-�Jʫd7���6O�g ����(�L�ntm���[7H-*7" �]���H��]]���Hg�X�_�e��&��z������I3H�@I����Ò�Q}n��A5�yS�MMb�K�Vw�i��������&56��迵� �Q~�=�j��y%P����К���,Y�#Ģ���["w%c�'�v�(����� fa����S�z�qv}�,z-@sFk�w�=�WT �cM~� @�K���UPR��gg��M��H�Y�<y\�3a��j~ƹ�b�j�t���N] Fy�Έ�Owڈa&&���y�����CtG��w� �jhQ[3���K�ë)�kxn��B�c�u"�h=�V�__F�R�s��u�Ȱ� 4�:�NF~�y(�e��M<�œ�U�H;6�)�)�d��J����;��?��O�J��g�r� ���0�'���;��v���W��.6�̉�����F�>������ӱ�����%��9�v�#�w��Yn�)TgQ��HT�� �^������.�$w�Ue?�JiXg���#����qP-��lJ�8 ��յ�P���<Q�=���XI���g��GM"�@&뎜gh������я$��\$�q1�Q�UEG#=3 ��glYg6(,t�N�i_�A%��Q?���4݃�������@ !�9�����)[�0�S[r�5;+�D���,n�1��� 2f�a��-���1����䕲��;��J#\��[��S�G���;��i�F�����gb��w��s���L&�%��+'�`ș��'����of������F0���.�B�מ���piiHq�8 ����츂T���J�PT0Ը��,�_� |�f���m?�i6;�Ɵ������n�_��B�P��\T�*�n��ƝdIDc�n��qy�<H�{WjlF-=�R���������o-����\S�z-�%V���=J�률DH�Y�ǭe�=�ʩ�sB���3��������L��M?Й(� k��#�v���, [.@|�|'����k��d������`7]�X��N@l�DȠ������}���JGF*yi�w^"�ΊA�������K��F��/E+��֥�2�����\sYM(�I1-RgY��N�c�~��p�$Z�&<���8 �$�]S��BWVdψO�U�Ӏ����_ӁwS,�~���h���f���I^��xz�T�k*�f(״�i���w�Vx�� ׇC���Rs����3P����1�؝�T)EX. *�K�X��m^�f������3{�Cz�
Static task
static1
Behavioral task
behavioral1
Sample
eacbbc718af77f683de5f2056ef7cc8a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eacbbc718af77f683de5f2056ef7cc8a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eacbbc718af77f683de5f2056ef7cc8a_JaffaCakes118
-
Size
544KB
-
MD5
eacbbc718af77f683de5f2056ef7cc8a
-
SHA1
c7d6b4ec391e976645e62dbe18d4bcc9eef002ab
-
SHA256
af094604ce4e19f462581195e353a02c2b5154ed067089cb16b0b53c9da220d3
-
SHA512
e9b3b2bc439a802dedda54f502e955371bbc98264ce4675ba8acf549b48df66422298c25e9216272efdb0d29f6ae1de7d053b5c8fb25d6eb031de296aaec96c1
-
SSDEEP
12288:rwFEgKNNfynx6DLQN3R3PwGLxe0DgqRI9Ncon9IV4Q2b8:SEgPnx6E3R3P/x7DgB8o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eacbbc718af77f683de5f2056ef7cc8a_JaffaCakes118
Files
-
eacbbc718af77f683de5f2056ef7cc8a_JaffaCakes118.exe windows:4 windows x86 arch:x86
d216e71b8623aa482be816318ff305bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
msvbvm60
__vbaVarTstGt
Exports
Exports
Sections
.textbss Size: - Virtual size: 409KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 453KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 149B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zp0 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zp1 Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zp2 Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ