/���n���s���_S����u����J��R�w�.|���peGO(C�N<�3���r��Rb+�9LͰ99��8@� �K�d�PՅe����͌�������_ΰ���0@"�R��J_�Jw�-v0�'i��s����og����x�L�d5�r\��Z�U�D�(.Y&;����3^W� ��5oE�O�F � G�҅�4�IC")���4tS)���nb��w��Y(Қ�G,�Z�z] {����ͫ�B0!.��5kf�+�2o�^J��Q\ی���7���_Z:2<���xF7X� -yq���m!t��rCHo�HC�Y�'�\m;�ەLug���{��z�9=�d��eJ��=u&�pE�W�}��,��B��U�qS�*-��,���\c+�ѳ�2�m1S헰��yH�Q<HC��?R���� B�t3!������%I�75��ֿ��������������os�&�,�%j@�v*���9]F�*l�m/�}0��a��[E�Y�F�..n8��d�ϒ`��E�F�Z�;�P��~_�V�֑/{����@��v�� �?��,�0/)��5�G�swX�x�N��;좒P��ޡ1��'�E�x�@���V]�GB$R ��-p�2�b2�;ѕ<�m��"]�@�0X߿��P'0��j O���ɾ&�9�t�����j�/�Op���ߌ���%wNj��F4����� �@��w�T��[�[B2 �c��s���c+ ; �s�"�G)c��br������1ٜ�7�G�GLO��FA����d�J��a�N�0z��\��(N���\+Cw�� ��8WW#�'㋪���*��I�O��O��UԴ��o��O�1���m#X\�ʓ��H��z�a���������I�M�%��K���& �{t*�j��?�A ,��C���Pc�=:��"�F����������;QQD>�&G��nV>��S2s��z���D����Z[t)0`\�f�?^�ݼT�7�jhe��5���Hd0z�*�tƅ�b���^|��~(P�ԅ�� �+B�� ��8�A`��}a%&��7��D?��|{1"M�bEz � ��;�J^��p�ۃ�!AHX��{��`��I�D��� ֫\�b��q>��`����9�q?pg�~Oa��TZ7���&, 6Q����a� ��w�:t)y�Fo���(�-M�^���㔛�Y���w�}��a���� 翠7_��ڨ�mcn�M�!�Qu#��ݧ�78� Wvߔ�m�JS~���k(�.����(����/uM+B+t@�D�3�I��o���( /��&!4� ����vt��IJc}Bt=*+meA�%� y���$������O��r�)qO{y=�H�V���1ڂ��c�����f�tD��1<��L{u�hu����W�-�D�ᗙ��N��^E/��0�W���iWB�m�n+)(�U�RI���IK�I#a[(i�aOp�F�����dԷ�L��d6ow&'QԺ�)��fny��QRdv�n� ����3��ׯ�����hD���0Eծ�!���=����\�ĉ���T3�$�ͧv�=ć��l�dv����F���YݷL�"+WH�Y���6X�&� ��۹w���)�s��������$X.T�N.�"Q(ʽf���St@>�HG�q�/�R�m�]u9UX��nW v��̘ �Q�?��|�=* ������<V�lO�&�K4z���A��V�Fӣ)�|�ix��ɠc�ׇ���c�(��5�TX+������{�[�7z��L�.t?�������#����ʼ��gX��@���i-�w��X�\��MJ{m+��}�(%��~��� �1&�oBkl�B&d˚�Na)ہ��Ƨ�ԝs�k�¡��`�@�{~�P���P�y�(ΰ��c�������5����Q.�0��C$���7����A.����e>!�ż��C���?߅���[Ë�8�N-אhGs��]|CQ N�N���h��� �Cp~�]u�ڜ�>Z���<��v� �X�H�M�8]r?&^��xM�� ƒ)�G���j����e�s�6�gb��<����H�Y������|��u���Fb����>g�N��9u<�T���.pi�W5 �*���N��B����!�4p�]�Pvt������^��0���#���V�C�����y P��F���-sB��=q�͒�� =���`�Ƴ��S�Q(*�;o=ڻ4pt�%����ޭ�gx*�DoX����نDr�^1^a������C�0���_J��y��Z9���B_�9�胥�:�Si��G�<� H��%��� �0�|��%i�0�.��c�Q�8S@���s?��m%�%� ����r�u_��jW�K��Mb��P�6#��y�����0W=�O�5ٽ��O�sdUG�����������ƣ�=ɪ�B��"�����@M���-�1������D�3�=��e��#�HU7�E����F��a5�7�W�gj��w� 6� ���{G�'��Q����j�wDKgl`�bk�D� ���R�ޡ���J�|9J�&r������J����_'���iH/�{��CxK�Y�}��T��<���n�������GI���F/�$����V�G�6����Y?��[��Oi�� �a�+F�oRT�L� G���%� mul�ݣ`4?C�1l;��ʶ��쬖��Ow^H�m��/�q�� ̟��W��Z&Q�כ�f��=+�5�2�ڦm"PR_4����3��l��Qc�|����Z�df���y @�m�ex���܃��hQ'ɦ�,_M�*bR�ͰAp���S����2Mr�v�PzT�3���� � �S���4�ݿyee:O�+����Z�}���}�}���ԟx��4)���GA<�����9��p~��7�f�1#�Z�<i�V�=�E�D6�i�� �*�d�����Rё!�m��h��r��$��c�w�9 �����D��8��S������~O�U��bE��Aj���DƟcY���a���h��\��R���ZbO�4Va��R,�s��w�"�p0td�%
Static task
static1
Behavioral task
behavioral1
Sample
07549c177cc16c9d2059e20c9823e867_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07549c177cc16c9d2059e20c9823e867_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07549c177cc16c9d2059e20c9823e867_JaffaCakes118
-
Size
311KB
-
MD5
07549c177cc16c9d2059e20c9823e867
-
SHA1
c49936086eabdf43cc431e59becc72486fe8aa7f
-
SHA256
bad26961d834ea9b44d651f963fb87719b14c7fbb16e978a8f212b52caca43ea
-
SHA512
b80236778afa51283edce1944b61929daaf767e0942781a1404d03cee9e2131ef2418ad5252e0a056d7051f4636b31fd93e3cc3c3fd6e93f253df70dc599ca63
-
SSDEEP
6144:LX/OabE4Iq7eegY801F0OTz+ew7h2CjdK2yC55pmb87Ktv5F1g:LvOabE4IZ/Y801FXqRh2sHC48v5s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07549c177cc16c9d2059e20c9823e867_JaffaCakes118
Files
-
07549c177cc16c9d2059e20c9823e867_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DBB0 Size: - Virtual size: 591KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DBB1 Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ