8�K����p�S0M� ����y����)a�`�a��Q�o#u�n�h�K ���ؓz:a��<�Җ�}�O۞�T>�0��\t+35a�Gŕ@�8"U�}���6U2_�QW-����<I�y���.���^[����pv�%�2~}\�J��D}���������� ɯ���ԇ���?;(��� ��nl'�(+��e�mo~oGW�vL�X��2�5�r�zDg 7`WR�d.5�<��!�N�w�M*�3tO�e�\�ա����8���~�q�6`���s��g�7.~v~�\!V�xE��z���ߧPU�9tm���GF`w�7���|�xx��D��ǵ���,4� �V�3��&S&C��q�� ����^�Z�jY��:@�6��^�k�v��,Ѧu���������){x���\�<�9g�L�[ͦ!����H��;��븱ls]���lg��0���la3�pm�LC�Z%龈\�1��a�t]1A�?���5̕�?�ϕ�L�6�� %�_�!�s��z�g�O��7F��T�`�V&��/w�����[�"���4�$����h�������?�%?�Α��?��"�����6�塏Խ��:0�K�o�#���NZ��|TǪ�{ ϱ�ͧ��)����Q�KE������= �y����Ō�(Q�ƹ,�>��"�D��"�/����3C���� �?��t �ǭ#�,\��������+����(��#?-=��`P��>EO�w��9������ai4���w�_�y�R�ZJv��YϠ��Q7$�c�]/QO"�O� �n����D�2����,�`��m���p�u���Q.�|��a���Om�&��X�9}V��7_��c�5���pL���~���9Z�rx������ף� �X��;) mW��:�Z��CyV�O�a�G�;��#טDZ�[����f��V�nj�T�zM���)!n��w���o&�%���ŀra>���*U�_��9�n���IV̛�ɘ���$V�ijLO��0}Z����UpW�/�Y��Փ���(�B�-'�ʛ�c#W�!%��Ds]���ZȎڎ�F0c��z�VP靴��*��B�����Cm��Q"����������V���"�}i����u��-�6���:lȌ�s��=�`�/g��4^r���Xjti��e7U�~H��+{�&1��������a����`y����=��+Y��,ܵ��Y���W��4��ˈ� ��X8�Rf���[��������JD��M���/���x��U4e0Mj|�n���)1�����c%�����(���^�;n�~h4O�:M��\��bwٓI��瑾��L����,�z�`����`¡Z/CE��T�����#I�{}�����ؠ"+��1 �O=�R2�&/�U����]M]�Tz`�"fb)�C�ל�K˔����=�w������0+YH����Lˈ���oZǁw���or��n(x��d��v%��U@��0NB��,ӛ�N�y�wVֶu�%�.�!H�0ظ7�����@�{���Ur3{��ZC_�F��̀��TQ�V���X�����1�Q�9w��I�W�b���T�kS�i���p����$�w��6`�Lsr��z7b Py��$�?�Ƨ.��~��c*zh�_IZ� �cz�KT;+�U��?���>;u�'r;Wo4����J3)S����VQ� a��� !I(!@���I�e跃���9%m�\dq�F�1�Ua�:�W���������x�4����V�9fV�X��\��{p��y$(�2�V�u��j~5 ��eG�9�ہ�R��=�C@��䲷w3g^@7;�M��4��5!8��i�@�w���p-�����OΉ?L*���0rG���!���Z�R�u s��~˼������{vӃ��)~˂���.��?�g�:�=�:�^���EL@�_�3�~�������%�]�*�a���afZ��uN�SCޞ<�y��)e �"������5h�>V�cJR����C�0��!�^�`dȟr���T����H�-�f�^�P��ű �`�^�٨x���fN����0AF���L�4����e!A��`��f�U����D���+�r �k�G�6�Q{E��E?�Gv!����%3Ic�O�y}.pE�,F �!�3�x���t�V�Ai/~�(��jSfgi�Ҍ�3�h�Y�����U�yɍ��7�sG�pGzQ���r��T��Ϫ��� �?6.�ĵ����)F��DI�������_#J��ّ�����Ij�xN�i<k-�-�݈$ nں#<�(𖭃���M3�S8�G,�1)%�0Z�R-���r#��k��r�J�.k8F;ؐ�� O�D��T"W�lG�i¨��<���ˤFvo�j�|f�B6�\�������A���{�-��`�7�������C4�L��{����MDhB�2�"�0mg����O�����B@�4����I���M���'�t�R��������0�G���r�YGioT�l^�TG�dX�m$�8��jPi%n5&���%��V_��Gdx��Q�8Ԗ���c�K��|��Ǫ`���&�_������V'�S����!�@�K��?��A��/��?�J�h������dA��V��T���a!�Ɩ��8(u��!���jZ����<J�8'��R�I�a��Z�o$&lᴖ�˶~�a����[�SQ���@űb�TH]�r�$@/j١=<u?M��O��_D��vg}�Á\Ә]���Dz�������R�ą �(�5z�+�KZ��Y�*oA� C����sк���d�P�w�M[��H�6�q$կ���_��5Z��?Ҹ�ڷ�����k�d�������2k��ָs,7��R��|�I�;��@�ODX���>A��8s�WR/5 ������~du/�g��S-/NU���&��������wˊ�Z˰����X���H�/�4Tc�iweq�(d�I�ѥ�^9�y�\_x�ć�r�>E�n��ٯ����E�4lLU<�O����51Z��y��p�`�y��
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_9d10221f075caefcbcdc4c76de70faa5.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_9d10221f075caefcbcdc4c76de70faa5
-
Size
4.2MB
-
MD5
9d10221f075caefcbcdc4c76de70faa5
-
SHA1
2ae712f970d7ed27670cfb810ac4327c86e6ac14
-
SHA256
fc7d586e78034884dc0f040932991fe2fde15146a3b92c7ad27f3b48e96da5a2
-
SHA512
cad567c39ed4da439d23b288ef4fc9f251ef12a47213c8d7452d82db32852e3a600e510e550b7c80618172019cad73c44e7cf3d6ade60774a96a4d3238b59451
-
SSDEEP
49152:pmccZDNLHQrcvDpKmntqii36tN4p92qQfN6uSz+uZjWxPyJlnNwydgfjNNGVdKbc:D5rcvB66tyaNBS3CyPpmQsfawYTbpZR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_9d10221f075caefcbcdc4c76de70faa5
Files
-
JaffaCakes118_9d10221f075caefcbcdc4c76de70faa5.exe windows:4 windows x86 arch:x86
161a37e106c68c838f2aac80469f5c87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStrings
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
wsprintfW
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss0 Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss1 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss2 Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ