C:\Life\Ball\Box\Flower.exe
Static task
static1
Behavioral task
behavioral1
Sample
43b0547ad7b8fb231543691df8f7d021_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
43b0547ad7b8fb231543691df8f7d021_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
43b0547ad7b8fb231543691df8f7d021_JaffaCakes118
-
Size
190KB
-
MD5
43b0547ad7b8fb231543691df8f7d021
-
SHA1
8e184971906deecdad1345c16fa935dbb11e3e73
-
SHA256
371b0b9a94613cedcff1c6b5e60ed830865e67df9ab296c6010569c7ee8a5700
-
SHA512
7bbe7a5836be68ecc3c57dbe39f1e9451f033526736932dbf6fd46f4882ab5eb64231e543aacc0997b5aeddb95667d2f66410fda65f825b66f96297f6b1e31d3
-
SSDEEP
3072:zXTaDXuw0ChtfAUFAjiBsXON4CJQdH2Vh+TqXvmXKlxyklTYWJPfiK:fiXl0k5AGBAOFwEs0vmmTt9JyK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43b0547ad7b8fb231543691df8f7d021_JaffaCakes118
Files
-
43b0547ad7b8fb231543691df8f7d021_JaffaCakes118.exe windows:5 windows x86 arch:x86
f1fac7b15279da2203eb27d5a3c0e660
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
EndDoc
WidenPath
GetROP2
CreateFontIndirectA
CreateFontIndirectW
ExtFloodFill
kernel32
GetTickCount
FoldStringW
GetBinaryTypeW
LocalSize
CreateDirectoryA
GetModuleFileNameW
user32
ArrangeIconicWindows
CreateDialogParamW
DlgDirSelectComboBoxExA
SetMenuItemInfoW
SetScrollInfo
GetWindowRect
CharNextW
SendMessageTimeoutW
SetDlgItemTextW
LoadCursorW
GetNextDlgGroupItem
IsCharAlphaA
IsCharAlphaW
atl
AtlAxCreateControl
AtlAxCreateControlEx
shlwapi
PathFileExistsW
Sections
.dedrde Size: 1024B - Virtual size: 810B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vggh Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wqew Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ereffv Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdgdfs Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ