Static task
static1
Behavioral task
behavioral1
Sample
DSCJPGFOTO15032011.JPG.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
DSCJPGFOTO15032011.JPG.exe
Resource
win10v2004-20241007-en
General
-
Target
2bce2fc6e08770034a39682cea151a14_JaffaCakes118
-
Size
206KB
-
MD5
2bce2fc6e08770034a39682cea151a14
-
SHA1
cf3221e8aec97af4e6cade6d6d4adc5243135697
-
SHA256
d2ccdc0bb84373f2edad8a1ade9bfc2dc3b8c6054b7e52c4d1fbcb25335a677d
-
SHA512
ef3ef41ac8b20f305a03aa3df3999062f3f0e01876e7ea47a19d31f5b9b3e022ccdfb45a993df8c996526c62f179a646008f7705306333bc0ff201c6c98eb6a1
-
SSDEEP
6144:29Kk+bh2BP+/L1rqMIRdLOZ5MBV9gtvvp1jrmy:29KyBP+s1fK07AR1jKy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DSCJPGFOTO15032011.JPG.exe
Files
-
2bce2fc6e08770034a39682cea151a14_JaffaCakes118.zip
-
DSCJPGFOTO15032011.JPG.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 24KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 175KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE