C:\Life\Ball\Box\Flower.exe
Static task
static1
Behavioral task
behavioral1
Sample
3a0650df9cd5c8d26d6c29f31f934a8a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3a0650df9cd5c8d26d6c29f31f934a8a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a0650df9cd5c8d26d6c29f31f934a8a_JaffaCakes118
-
Size
194KB
-
MD5
3a0650df9cd5c8d26d6c29f31f934a8a
-
SHA1
de778b9cb1212a86ce56b80cb95d1231928bafab
-
SHA256
f521c594bc946c2772e76079a9c3925c46bff514f05c0bda4295753ca67d86ad
-
SHA512
f7381d44bceb2cb72eba591048cf3648da558d5fdf80977bf9efee2b56cfbe3ed137cf4547f55959f0f870ca2f178db68cce72b896244d0a896b8385c72db68b
-
SSDEEP
3072:f4cHjU5/5xWhKvuQPpp24SpYDwj3uqFDwFYfpzuvAqgTLbWJPfix:f4R5RxWapNADLL6Jy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a0650df9cd5c8d26d6c29f31f934a8a_JaffaCakes118
Files
-
3a0650df9cd5c8d26d6c29f31f934a8a_JaffaCakes118.exe windows:5 windows x86 arch:x86
aceb59d6ea0573309ee85de96416f9cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetFileSize
EnumResourceTypesA
ClearCommBreak
GlobalAlloc
UnlockFile
ReadFile
HeapCreate
SearchPathA
user32
RegisterClassA
GetKeyboardType
PostMessageW
TranslateMessage
DlgDirSelectComboBoxExA
GetDlgItemInt
GetKeyboardLayoutList
WindowFromPoint
SetCursor
MonitorFromPoint
GetMenuItemRect
CharNextW
SetScrollInfo
CreateWindowExA
GetSystemMetrics
LookupIconIdFromDirectory
AttachThreadInput
GetKeyState
IsCharAlphaA
SendNotifyMessageW
ArrangeIconicWindows
GetActiveWindow
GrayStringW
IsCharAlphaW
gdi32
SetWindowExtEx
CreateFontIndirectA
GetTextExtentExPointW
TextOutW
CreateRectRgnIndirect
CreateFontIndirectW
DPtoLP
SaveDC
SetDIBits
GetStockObject
atl
AtlAxCreateControl
AtlAxCreateControlEx
shlwapi
PathFileExistsW
Exports
Exports
_FfgdjhjfghghjlkfUJfkjfdjkgjkfjkgfJfkd@0
_GetClassInfoAGetClassInfoAGetClassInfoAGetClassInfoA@0
Sections
.text Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tin_c Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tin_d Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tin_a Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tin_b Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ