Overview
overview
6Static
static
3Insert Lic...te.bat
windows7-x64
6Insert Lic...te.bat
windows10-2004-x64
6Licenses D...er.bat
windows7-x64
6Licenses D...er.bat
windows10-2004-x64
6Recover da...se.bat
windows7-x64
6Recover da...se.bat
windows10-2004-x64
6TNODUP.exe
windows7-x64
6TNODUP.exe
windows10-2004-x64
6config.bat
windows7-x64
6config.bat
windows10-2004-x64
6Static task
static1
Behavioral task
behavioral1
Sample
Insert License with the maximum expiration date.bat
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Insert License with the maximum expiration date.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Licenses Downloader.bat
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Licenses Downloader.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Recover data of current License.bat
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
Recover data of current License.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
TNODUP.exe
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
TNODUP.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
config.bat
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
config.bat
Resource
win10v2004-20240802-en
General
-
Target
84b89df7126a95b321489915330c5a31_JaffaCakes118
-
Size
608KB
-
MD5
84b89df7126a95b321489915330c5a31
-
SHA1
0ec06aed619fe6fa19f965be6481eab1b61ed2ba
-
SHA256
b9df4042c15d8954bddc8b0fdaf9dabe4c3bf8a74051a6d7c884b7c80aa1c95b
-
SHA512
7384ee5741964e6cce606b9ba03683b0fdbb48a5ddad8823970e2477cc6672c6aa72e89b77a71ca262a1b00188b2ec533529f4b2414a191d2aeb4b2529e9e72e
-
SSDEEP
12288:okFbMVopO69orXwboaZsfqZU008JfiJYYhAE89h3bhpIyLucnT7L:oEbM6pOprXwbLKya07UAfhdpl7nb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/TNODUP.exe
Files
-
84b89df7126a95b321489915330c5a31_JaffaCakes118.rar
-
Insert License with the maximum expiration date.bat
-
Licenses Downloader.bat
-
Recover data of current License.bat
-
TNODUP.exe.exe windows:5 windows x86 arch:x86
43918d7ec63e5da4cb6d707a33249f02
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetGetConnectedState
comctl32
ImageList_BeginDrag
ImageList_Add
ImageList_GetIconSize
ImageList_Draw
ImageList_GetImageCount
ord17
CreateStatusWindowW
ImageList_Destroy
ImageList_EndDrag
ImageList_DragMove
ImageList_DragEnter
ImageList_DragLeave
ImageList_SetDragCursorImage
ImageList_ReplaceIcon
ord16
ImageList_Create
wsock32
WSACleanup
closesocket
shutdown
listen
getsockname
bind
setsockopt
inet_ntoa
socket
getsockopt
accept
WSAStartup
sendto
recvfrom
connect
WSAGetLastError
ntohs
ntohl
gethostbyaddr
getservbyname
htons
htonl
ioctlsocket
gethostbyname
send
recv
select
__WSAFDIsSet
kernel32
CreateThread
SetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ExitThread
DeleteFileW
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WriteConsoleW
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
HeapReAlloc
HeapAlloc
RtlUnwind
HeapFree
GetFullPathNameW
MoveFileW
HeapCreate
VirtualFree
VirtualAlloc
IsDebuggerPresent
GetModuleFileNameA
GetModuleHandleA
WriteFile
ReadFile
OutputDebugStringW
GetStdHandle
TerminateProcess
SetEnvironmentVariableW
GetComputerNameW
IsValidCodePage
GetCPInfo
GetCurrentProcessId
GetEnvironmentVariableW
IsValidLocale
GetUserDefaultLCID
GetACP
SetCurrentDirectoryW
CopyFileW
GetFileAttributesW
GetFileType
GetTempFileNameW
FindFirstFileW
FindClose
GetTempPathW
CreateFileW
GetWindowsDirectoryW
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
FormatMessageW
ExitProcess
GetExitCodeThread
TlsAlloc
TlsSetValue
TlsFree
TlsGetValue
ResumeThread
TerminateThread
SetThreadPriority
InterlockedDecrement
InterlockedIncrement
WaitForSingleObject
GetThreadLocale
GetLocaleInfoW
GetTimeZoneInformation
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LocalAlloc
LocalFree
GetProcessHeap
HeapSize
GlobalSize
GlobalFree
SetErrorMode
GetCommandLineW
FreeLibrary
LoadLibraryW
GetCurrentThreadId
ExpandEnvironmentStringsW
GetProcAddress
CloseHandle
GetCurrentProcess
GetVersionExW
SetLastError
GetLastError
Sleep
GetModuleHandleW
GlobalAlloc
GlobalLock
GlobalUnlock
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
LCMapStringW
LCMapStringA
GetTimeFormatA
GetDateFormatA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
EnumSystemLocalesA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
CreateFileA
GetCurrentDirectoryA
GetDriveTypeA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
RaiseException
CompareStringA
user32
DdeGetData
DdeCreateDataHandle
DdeGetLastError
DdeInitializeW
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleW
DdeNameService
DdeConnect
DdePostAdvise
ShowCursor
DrawStateW
DrawEdge
ValidateRect
GetMessageW
TranslateAcceleratorW
CreateAcceleratorTableW
DestroyAcceleratorTable
GetMenuStringW
DefMDIChildProcW
TranslateMDISysAccel
DefFrameProcW
DestroyCursor
DrawIconEx
DrawFrameControl
GetWindowDC
RegisterClipboardFormatW
GetWindowTextW
GetClassNameW
LoadCursorW
MessageBoxW
GetMessagePos
MapWindowPoints
ChildWindowFromPoint
GetWindowTextLengthW
HideCaret
IsClipboardFormatAvailable
keybd_event
CreateIconIndirect
LoadImageW
GetIconInfo
LoadBitmapW
LoadIconW
DestroyIcon
UnionRect
InsertMenuItemW
GetSubMenu
CreateMenu
AppendMenuW
InsertMenuW
RemoveMenu
DestroyMenu
CreatePopupMenu
SetMenuItemInfoW
ModifyMenuW
CheckMenuRadioItem
CheckMenuItem
GetMenuState
OffsetRect
DrawFocusRect
DdeFreeDataHandle
CreateDialogIndirectParamW
RegisterClassW
UnregisterClassW
FlashWindow
SetWindowRgn
KillTimer
GetSystemMenu
EnableMenuItem
DrawMenuBar
GetDesktopWindow
IsIconic
IsZoomed
BringWindowToTop
GetDlgItem
CreateDialogParamW
InflateRect
GetUpdateRgn
GetSysColor
CreateWindowExW
SetWindowsHookExW
IsDialogMessageW
TrackPopupMenu
IsWindow
PtInRect
SetCursor
GetCapture
DestroyWindow
UnhookWindowsHookEx
UnregisterHotKey
RegisterHotKey
CallNextHookEx
GetActiveWindow
GetMenuItemCount
GetMenuItemInfoW
SystemParametersInfoW
GetMessageTime
GetWindow
BeginDeferWindowPos
EndDeferWindowPos
InvalidateRect
SetWindowTextW
GetFocus
IsWindowEnabled
IsWindowVisible
CallWindowProcW
DefWindowProcW
DeferWindowPos
MoveWindow
ClientToScreen
ScreenToClient
UpdateWindow
RedrawWindow
SetParent
GetCursorPos
WindowFromPoint
ScrollWindow
SetScrollInfo
GetScrollInfo
SetCursorPos
ReleaseCapture
SetCapture
ShowWindow
EnableWindow
SetFocus
SetWindowPos
SetWindowLongW
GetWindowLongW
FillRect
GetKeyState
DdeUninitialize
DdeQueryStringW
DdeFreeStringHandle
MessageBeep
MsgWaitForMultipleObjects
PostThreadMessageW
CopyRect
SetTimer
GetSystemMetrics
GetAsyncKeyState
VkKeyScanW
GetDC
ReleaseDC
PeekMessageW
DispatchMessageW
TranslateMessage
PostQuitMessage
GetUpdateRect
BeginPaint
GetClientRect
EnumDisplaySettingsW
AdjustWindowRectEx
ChangeDisplaySettingsW
DrawIcon
EndPaint
SetMenu
GetWindowRect
RegisterWindowMessageW
GetForegroundWindow
PostMessageW
SetForegroundWindow
SendMessageW
FindWindowExW
GetParent
FindWindowW
LoadStringW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DrawTextW
gdi32
GetPaletteEntries
CreateCompatibleDC
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateBitmap
CreateHatchBrush
CreatePatternBrush
GetStockObject
PatBlt
LineTo
MoveToEx
RestoreDC
SaveDC
SetStretchBltMode
GetClipBox
ExtSelectClipRgn
ExtFloodFill
GetPixel
SetPixel
Polyline
PolyBezier
TextOutW
SetROP2
GetCharABCWidthsW
GetTextExtentExPointW
SetWindowOrgEx
SetBkMode
SetWindowExtEx
SetViewportExtEx
SetMapMode
GetBkColor
GetTextColor
Arc
SetTextColor
Polygon
SetPolyFillMode
PolyPolygon
GetObjectW
RoundRect
Ellipse
SetBrushOrgEx
MaskBlt
StretchBlt
StretchDIBits
ExtCreatePen
GetRgnBox
EqualRgn
PtInRegion
GetNearestPaletteIndex
CreatePalette
CreateICW
CreateDIBSection
GetDIBits
CreateDIBitmap
GetDIBColorTable
EnumFontFamiliesExW
GetEnhMetaFileW
CopyEnhMetaFileW
DeleteEnhMetaFile
SetAbortProc
EndDoc
StartPage
EndPage
StartDocW
CreateDCW
GetSystemPaletteEntries
SetTextAlign
RectInRegion
CreateRectRgnIndirect
CombineRgn
SelectClipRgn
CreateSolidBrush
Rectangle
CreatePen
SetBkColor
GetRegionData
ExtCreateRegion
OffsetRgn
GetDeviceCaps
DeleteObject
CreateFontIndirectW
ExcludeClipRect
CreateRectRgn
GetTextExtentPoint32W
SelectPalette
RealizePalette
Pie
GdiFlush
SetViewportOrgEx
GetTextMetricsW
SelectObject
comdlg32
PrintDlgW
ChooseFontW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
PageSetupDlgW
advapi32
GetUserNameW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegCreateKeyW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
GetTokenInformation
shell32
SHGetPathFromIDListW
SHGetMalloc
ExtractIconExW
ExtractIconW
DragQueryFileW
DragQueryPoint
DragFinish
DragAcceptFiles
Shell_NotifyIconW
ShellExecuteExW
SHGetSpecialFolderLocation
ole32
OleUninitialize
OleInitialize
ReleaseStgMedium
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
CoCreateInstance
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 373KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
config.bat