Static task
static1
Behavioral task
behavioral1
Sample
IsItOn.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
IsItOn.exe
Resource
win10v2004-20240704-en
General
-
Target
2a101b0010a646b6f1a0e3301bca8f24_JaffaCakes118
-
Size
273KB
-
MD5
2a101b0010a646b6f1a0e3301bca8f24
-
SHA1
ca20c9b2d75c52432ce42bfe3fc2cb90e4259a52
-
SHA256
683e37c689e0e3c88b99d867f119cd8a31a63f0d3f7fc87930d4be4bb10998d6
-
SHA512
7284bb75b4d6205573df62b26a084bbebca29a28ea1431b6ed76e220af0d3abea2447d9611bfa158c2e3ef33b28e0bd34178e1ef2fe6dd2d3698475a1754138e
-
SSDEEP
6144:TTT/9QCOE/RxM7njdjg68cGz0KUZ/T4ETqHsiexsqLWmnCl:TTT/vJ/RmLjdjg6CzW/7kvexsJmnCl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/IsItOn.exe
Files
-
2a101b0010a646b6f1a0e3301bca8f24_JaffaCakes118.zip
-
IsItOn.exe.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
Size: 258KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE