Static task
static1
Behavioral task
behavioral1
Sample
Picture20-JPG.scr
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Picture20-JPG.scr
Resource
win10v2004-20240802-en
General
-
Target
c7b28435ea73ca06b3154f32fb513ef8_JaffaCakes118
-
Size
24KB
-
MD5
c7b28435ea73ca06b3154f32fb513ef8
-
SHA1
fc4527519915da6006c4d7f44fba4fbc01aedbf4
-
SHA256
41e11c8bae6f51346da84349ca797f7d91c7ecf0f4e891186d5825d2c6996321
-
SHA512
98a3ec33b0e6c6962efcbc615f4c8d9e8a3272b84535391aec2571aa0388fce3a886ec317b2d93cdc33e339f5f9130f4a413559d9f719f6f98c61c9fa92fd84b
-
SSDEEP
384:T/ve65d3na6o8O5Iq6TPUksMkJf4xMXcqQIdWui4GGxGiPXi0kJYg5bnwnf8k0PQ:zd8g+Mq5tY4kegZn+Ejs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Picture20-JPG.scr
Files
-
c7b28435ea73ca06b3154f32fb513ef8_JaffaCakes118.zip
-
Picture20-JPG.scr.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.idata Size: - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ