Static task
static1
Behavioral task
behavioral1
Sample
IMG2110EJPG.exe
Resource
win7-20240903-en
General
-
Target
ed801597b5550e27149abe9fec85a646_JaffaCakes118
-
Size
170KB
-
MD5
ed801597b5550e27149abe9fec85a646
-
SHA1
6cdac0c414b82a808211ac43b50f71b43043f8ae
-
SHA256
1cf1ca2a3d8ead48d6d4f184774eb67779b4a2d02d42cf5b33d52666c0e4c83d
-
SHA512
a776c7c5e6fc2ba278d31993ec34a4104fbd732e778f41bb87c2f475d5c18edbcd63135981da11862ebab41e4dce14bc479ccc111ae02126668631c30e57e9a2
-
SSDEEP
3072:rmWHfbdAesN79jwrhK9VxwMe+3mWU9SD64Ylc3ILqMNw7qU5UkTYpMokrrrrKFf0:LDDUOQ94+3DUwD64EFqMNnpModW4JzLI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/IMG2110EJPG.exe
Files
-
ed801597b5550e27149abe9fec85a646_JaffaCakes118.zip
-
IMG2110EJPG.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 13KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 159KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE