Static task
static1
Behavioral task
behavioral1
Sample
hldi.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
hldi.exe
Resource
win10v2004-20240319-en
General
-
Target
01fb1fa567e35f25d84d9343ea5c3cbb_JaffaCakes118
-
Size
36KB
-
MD5
01fb1fa567e35f25d84d9343ea5c3cbb
-
SHA1
2c90641738203e62bdb6ffffc73f6266f2bf0ccc
-
SHA256
5ef9f36554658dc0b2d5716c3b4ed43f1e86ff0abb0a99ce01898ff6b7012a3d
-
SHA512
0217cac6b05bb0dc6c34ab94f49d3a50d5167a2493c242fe23ff547b6a9629631a1e9c4ce7e7ffa4f41df799caa87028a14ef79c9ac08a9e319912f3f8a7ccac
-
SSDEEP
768:AJLZZOd56SWKaIGBFrvTyJtRHzS0kIgmrdLgNOifQrSE:YLZdKaIGvTUtRV6GZQTfQrV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/hldi.exe
Files
-
01fb1fa567e35f25d84d9343ea5c3cbb_JaffaCakes118.rar
-
hldi.exe.exe windows:1 windows x86 arch:x86
97fb2b8d02f5ef748d1d486424934be1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
GetProcAddress
FormatMessageA
GetLastError
ExitProcess
CreateFileA
CloseHandle
WriteFile
ReadFile
GetStdHandle
GetCommandLineA
TlsAlloc
GetTickCount
AllocConsole
SetConsoleTitleA
TlsSetValue
user32
MessageBoxA
Sections
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 110KB - Virtual size: 16.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE