Static task
static1
Behavioral task
behavioral1
Sample
DC0014.JPG_______________________________________________________________JPG.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
DC0014.JPG_______________________________________________________________JPG.exe
Resource
win10v2004-20240802-en
General
-
Target
156f374839f78a761ae3d66d2e8c9d69_JaffaCakes118
-
Size
3KB
-
MD5
156f374839f78a761ae3d66d2e8c9d69
-
SHA1
7dcaac88d6d2e05279da40238e24e5e4cf31ac5c
-
SHA256
ddccc0b8a8228fe11dde3a339a92989de3a62405fb1660ec9839d3ee054c4999
-
SHA512
b6d7cdf2ccc8869a8f6c2d92ec7e35d26d2686756b6ae9f7dc9fab0fde38e0a88e57ca272a27ae93118738a5ca9cc484c48baa6df8fd8ec82d692cee013548ea
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/DC0014.JPG_______________________________________________________________JPG.exe
Files
-
156f374839f78a761ae3d66d2e8c9d69_JaffaCakes118.eml
-
DC0014.JPG.zip.zip
-
DC0014.JPG_______________________________________________________________JPG.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
email-plain-1.txt