Static task
static1
Behavioral task
behavioral1
Sample
Foto.scr
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Foto.scr
Resource
win10v2004-20241007-en
General
-
Target
2b2a49971c8c20b8d056d292193ff343_JaffaCakes118
-
Size
276KB
-
MD5
2b2a49971c8c20b8d056d292193ff343
-
SHA1
7ecae0b301f3b3a73edb7d3836bca6ae359e52ca
-
SHA256
e00529aebb8599d56b594628b564b647f8026ac622ca7b062b087781540e1735
-
SHA512
0e8c0f96c6df99adecdc4fccb51b72fea1d5cd1ef8d1c9f84968ace31b30bf74f7b9c16d8e763e47575ad4a95ff50a1879902c9100f30cbd06c6721a8f5a0320
-
SSDEEP
6144:I3hDBgJ2aKY69mMWKLWQbKDHR6FfUML0JRZYjNTeNuCW7:IlVah69mMWKLWnqUVZYjNjCa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Foto.scR
Files
-
2b2a49971c8c20b8d056d292193ff343_JaffaCakes118.zip
-
Foto.scR.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 276KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE