Static task
static1
Behavioral task
behavioral1
Sample
nesterJ.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
nesterJ.exe
Resource
win10v2004-20240802-en
General
-
Target
8654fece1f007caefef50990de1757ab_JaffaCakes118
-
Size
236KB
-
MD5
8654fece1f007caefef50990de1757ab
-
SHA1
870dc766f1eaf3895192597edacac6ab96614045
-
SHA256
d7aff852c93a9b0a947164cef762759bc3ef1eea9094863ff2f2f362085c1a76
-
SHA512
10d654019db2b9ae4b6b59c5b7b19e4ab59cb932b7d246ad2649825daf50407421fb4d1c6ca4a6a839da31acbe92be8a5d17515e68e0b412a714a2d4cb6ba78f
-
SSDEEP
6144:4fJvz5168c0u9UyKW60mgRTGxgVCHadhuq5ru1iHAM1BJ:4fNlSUMCgRyRHqju1uASP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/nesterJ.exe
Files
-
8654fece1f007caefef50990de1757ab_JaffaCakes118.zip
-
SRC/NES/NES_set_VSPalette.cpp
-
SRC/WIN32/RESOURCE/nesterJ.aps
-
SRC/WIN32/RESOURCE/nesterJ.rc
-
SRC/read.me
-
doc/GPL.txt
-
doc/Readme.txt
-
doc/change.txt
-
doc/feature.txt
-
doc/mappers.txt
-
doc/netplay.txt
-
doc/readme_uo.txt
-
history.txt
-
nesterJ.exe.exe windows:4 windows x86 arch:x86
3de13ba3c6a71799565a11b130b5a61d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
FindFirstFileA
FindClose
GetTempPathA
GetCurrentProcess
VirtualAlloc
SetEndOfFile
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
HeapSize
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
TerminateProcess
WriteFile
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
GetFileAttributesA
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
ExitProcess
GetVersion
GetStartupInfoA
GetLastError
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetModuleFileNameA
CreateDirectoryA
CloseHandle
ReadFile
GetFileSize
CreateFileA
Sleep
GetCommandLineA
QueryPerformanceCounter
QueryPerformanceFrequency
SetPriorityClass
IsDBCSLeadByte
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
user32
SendMessageA
SetWindowTextA
GetDlgItem
IsDlgButtonChecked
GetDlgItemTextA
EnableWindow
CheckRadioButton
SendDlgItemMessageA
EndDialog
SetCursorPos
ClientToScreen
GetAsyncKeyState
GetCursorPos
GetForegroundWindow
TranslateAcceleratorA
GetMessageA
RegisterClassExA
MessageBoxA
CheckDlgButton
SetDlgItemTextA
GetWindowTextA
GetDlgCtrlID
ChildWindowFromPoint
GetDC
GetClientRect
CheckMenuRadioItem
GetSubMenu
GetMenu
DrawMenuBar
AppendMenuA
DeleteMenu
GetMenuItemCount
EnableMenuItem
GetSystemMenu
DispatchMessageA
ReleaseDC
TranslateMessage
ScreenToClient
PeekMessageA
GetParent
LoadIconA
LoadCursorA
KillTimer
LoadAcceleratorsA
CreateWindowExA
ShowWindow
UpdateWindow
SetFocus
SetForegroundWindow
GetSystemMetrics
PostQuitMessage
DefWindowProcA
BeginPaint
EndPaint
PostMessageA
AdjustWindowRectEx
SetCursor
SetMenuItemInfoA
SetWindowLongA
SetMenu
SetRect
GetWindowLongA
SetTimer
GetWindowRect
SetWindowPos
DialogBoxParamA
gdi32
AnimatePalette
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
CreateDCA
CreateDIBSection
GetStockObject
SetDIBColorTable
SetPaletteEntries
DeleteObject
StretchBlt
SelectObject
CreatePalette
SelectPalette
RealizePalette
advapi32
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegSetValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
shlwapi
PathRemoveExtensionA
PathRemoveArgsA
StrChrA
PathRemoveFileSpecA
PathAddBackslashA
PathFindFileNameA
PathUnquoteSpacesA
shell32
SHGetMalloc
DragAcceptFiles
DragQueryFileA
DragQueryPoint
DragFinish
SHBrowseForFolderA
SHGetPathFromIDListA
winmm
timeGetTime
timeEndPeriod
timeBeginPeriod
comctl32
ord17
comdlg32
GetSaveFileNameA
GetOpenFileNameA
wsock32
accept
WSACleanup
WSAGetLastError
socket
htonl
bind
listen
send
WSAAsyncSelect
recv
shutdown
closesocket
ioctlsocket
connect
WSAStartup
ddraw
DirectDrawEnumerateA
DirectDrawCreate
dsound
ord1
dinput
DirectInputCreateA
Sections
.text Size: 312KB - Virtual size: 310KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
nesterJ.txt
-
new.txt
-
pal/gameboy.pal
-
pal/gray_xyz.pal
-
pal/kasion.pal
-
pal/noisak.pal