Z:\Console\Resist\Corrupt\ASM.exe
Static task
static1
Behavioral task
behavioral1
Sample
2904d425c26f4d363706919023d4b477_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2904d425c26f4d363706919023d4b477_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2904d425c26f4d363706919023d4b477_JaffaCakes118
-
Size
136KB
-
MD5
2904d425c26f4d363706919023d4b477
-
SHA1
75b72395a56608756dab0be5651b92b1a0075e7c
-
SHA256
5dcd8d810243cb5d98585040e84bbb0aa20ca93f32c576a1b170a38e8d04931c
-
SHA512
72258f4a2be44826c05c2d7986f5aa0b071ac5c21018973d74c428e14ae31152d20de29b2c8f9e42d0fad3d169901db31ce70b0e7912d4e37c4d5ef97ca813d1
-
SSDEEP
3072:50b1mqjTDdUlsA0PitX6+cZfScpiHF62l/bGY:50b1XHiOA0atX6+aqcYjbT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2904d425c26f4d363706919023d4b477_JaffaCakes118
Files
-
2904d425c26f4d363706919023d4b477_JaffaCakes118.exe windows:5 windows x86 arch:x86
fd4fc4d9c67fc1ca122fea45ecf5a31d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
IsCharAlphaNumericA
GetDoubleClickTime
GetMessageA
GetDesktopWindow
kernel32
GetProcessHeap
shlwapi
StrToIntA
Exports
Exports
?ForsakenQuantum@@YGKPAUHKEY__@@PAUHPALETTE__@@@Z
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.tron Size: 512B - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data5 Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data4 Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data3 Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data2 Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ