C:\Life\Ball\Box\Flower.exe
Static task
static1
Behavioral task
behavioral1
Sample
849750450e7a03bc51303c164c514dc0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
849750450e7a03bc51303c164c514dc0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
849750450e7a03bc51303c164c514dc0_JaffaCakes118
-
Size
193KB
-
MD5
849750450e7a03bc51303c164c514dc0
-
SHA1
8c15f11277fa87b603ef91a1efcaad7eeac6cf27
-
SHA256
74ebdcf08e2ddcab939d756c0aafffde3f9bba09c4680c764b9a6e32df7a9519
-
SHA512
99e443b11623563ac4d00850e28e0f5bfadb3597045e61f375f611966718d83765094ff095ebf2c19359de151155fb813dc6f7997efeaa54810e358fe976f010
-
SSDEEP
3072:/MXh7IJpHv0TxsSmQLUtjiIUvuBfCw7i5Lpom+TLpLIjrwA5WJPfiWb:VpP0Ttwb5aQELbgVArv4JyW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 849750450e7a03bc51303c164c514dc0_JaffaCakes118
Files
-
849750450e7a03bc51303c164c514dc0_JaffaCakes118.exe windows:5 windows x86 arch:x86
f1fac7b15279da2203eb27d5a3c0e660
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
EndDoc
WidenPath
GetROP2
CreateFontIndirectA
CreateFontIndirectW
ExtFloodFill
kernel32
GetTickCount
FoldStringW
GetBinaryTypeW
LocalSize
CreateDirectoryA
GetModuleFileNameW
user32
ArrangeIconicWindows
CreateDialogParamW
DlgDirSelectComboBoxExA
SetMenuItemInfoW
SetScrollInfo
GetWindowRect
CharNextW
SendMessageTimeoutW
SetDlgItemTextW
LoadCursorW
GetNextDlgGroupItem
IsCharAlphaA
IsCharAlphaW
atl
AtlAxCreateControl
AtlAxCreateControlEx
shlwapi
PathFileExistsW
Sections
.dedrde Size: 1024B - Virtual size: 810B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vggh Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wqew Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ereffv Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdgdfs Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ