Static task
static1
Behavioral task
behavioral1
Sample
RGSSAD_WX.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
RGSSAD_WX.exe
Resource
win10v2004-20240802-en
General
-
Target
012e050a23090b56cb2c3d7b6dbd2687_JaffaCakes118
-
Size
385KB
-
MD5
012e050a23090b56cb2c3d7b6dbd2687
-
SHA1
afce1d1033ae3ee8e09cfa22969ce3325988a6a2
-
SHA256
b0311c50fb983edb992873eb6373f7e6e70ef2a88a3d9e45fb384ca4a0c65a37
-
SHA512
c7ecc60d8f31bd7d3cafb6aa7536ea6799e267385f2bf17bc013ac77877f3d701e61ab410bb18ee8c2c30ce33c0d9a7fd0f038a175c19a472f4fe2d59bf5df08
-
SSDEEP
12288:PkJ05DAfEafRZ9eOxScg4zYZYDHH2A892B:PND69aOxtgZYjZB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RGSSAD_WX.exe
Files
-
012e050a23090b56cb2c3d7b6dbd2687_JaffaCakes118.rar
-
RGSSAD_WX.exe.exe windows:4 windows x86 arch:x86
88c46f8c4c93b5b0566f7f8ce82d5346
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalSize
HeapSize
GetProcessHeap
GetFileAttributesA
CopyFileA
SetCurrentDirectoryA
GetWindowsDirectoryA
CreateFileA
GetFileType
TlsSetValue
ExitProcess
GetCurrentProcess
TlsFree
TlsAlloc
GetLocaleInfoA
GetUserDefaultLCID
GetACP
FormatMessageA
GetTempPathA
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetCPInfo
IsValidCodePage
GetTempFileNameA
FindClose
FindFirstFileA
GetThreadLocale
GetStdHandle
OutputDebugStringA
ExpandEnvironmentStringsA
GetStartupInfoA
GlobalAlloc
GlobalLock
GlobalUnlock
LocalAlloc
LocalFree
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
GetCurrentThreadId
SetLastError
LoadLibraryA
GetCommandLineA
SetErrorMode
GetVersionExA
MultiByteToWideChar
FreeLibrary
WideCharToMultiByte
comctl32
ImageList_Add
ImageList_Destroy
ImageList_ReplaceIcon
ord16
ImageList_GetImageCount
ImageList_Draw
ImageList_GetIconSize
ord6
ord17
ImageList_SetDragCursorImage
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragMove
ImageList_DragEnter
InitCommonControlsEx
ImageList_Create
ImageList_DragLeave
msvcp60
??0Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
msvcrt
strchr
malloc
strncmp
sscanf
toupper
strncpy
_ftol
_CxxThrowException
_purecall
strftime
_assert
tolower
isalnum
calloc
atol
_strnicmp
sprintf
strstr
isalpha
isdigit
memmove
free
__CxxFrameHandler
??2@YAPAXI@Z
atoi
time
_CIpow
_read
isspace
wcslen
exit
realloc
memchr
strtol
_errno
strtoul
strtod
qsort
getenv
rename
remove
_mkdir
_getcwd
_get_osfhandle
_open
_close
_controlfp
_write
_commit
_lseeki64
_telli64
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_except_handler3
setlocale
_stricmp
abort
_iob
fflush
fputc
fputs
wcscmp
fopen
fclose
fread
clearerr
fwrite
fseek
ftell
mktime
_open_osfhandle
_fdopen
localtime
gmtime
bsearch
fprintf
_snprintf
atof
_strdup
_ftime
_timezone
__dllonexit
_onexit
?terminate@@YAXXZ
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
user32
KillTimer
SetTimer
PostThreadMessageA
MessageBeep
DdeInitializeA
DdeUninitialize
DdeNameService
DdeConnect
DdeDisconnect
DdeClientTransaction
DdeFreeDataHandle
DdeGetData
DdePostAdvise
DdeCreateDataHandle
DdeCreateStringHandleA
DdeQueryStringA
DdeFreeStringHandle
DdeGetLastError
GetMessagePos
HideCaret
OpenClipboard
IsClipboardFormatAvailable
CloseClipboard
keybd_event
SetWindowTextA
GetWindowTextLengthA
DestroyWindow
SetWindowPos
GetDC
ReleaseDC
DrawTextA
GetSysColor
DrawFocusRect
SetWindowLongA
GetWindowLongA
SendMessageA
MessageBoxA
PeekMessageA
PostMessageA
GetKeyState
UnregisterClassA
LoadCursorA
RegisterClassA
MapWindowPoints
UnionRect
CreateIconIndirect
GetWindowDC
TranslateAcceleratorA
CreateAcceleratorTableA
DestroyAcceleratorTable
GetMenuStringA
DefMDIChildProcA
TranslateMDISysAccel
DefFrameProcA
DestroyCursor
CheckMenuRadioItem
CheckMenuItem
GetSubMenu
CreateMenu
AppendMenuA
GetMenuState
ModifyMenuA
RemoveMenu
SetMenuItemInfoA
InsertMenuItemA
InsertMenuA
DestroyMenu
DrawIconEx
DrawFrameControl
GetClassNameA
GetWindowTextA
GetMessageA
ValidateRect
GetIconInfo
LoadIconA
LoadImageA
LoadBitmapA
GetForegroundWindow
DestroyIcon
GetDlgItem
CreateDialogParamA
UnregisterHotKey
RegisterHotKey
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetActiveWindow
GetAsyncKeyState
VkKeyScanA
GetMenuItemCount
GetMenuItemInfoA
SystemParametersInfoA
GetMessageTime
GetWindow
BeginDeferWindowPos
EndDeferWindowPos
GetUpdateRgn
InvalidateRect
IsWindowEnabled
IsWindowVisible
IsDialogMessageA
CallWindowProcA
TranslateMessage
DispatchMessageA
PostQuitMessage
TrackPopupMenu
DeferWindowPos
ClientToScreen
ScreenToClient
UpdateWindow
RedrawWindow
SetParent
WindowFromPoint
GetParent
ScrollWindow
SetScrollInfo
GetScrollInfo
SetCursorPos
GetCursorPos
PtInRect
GetCapture
ReleaseCapture
SetCapture
EnableWindow
GetFocus
SetFocus
CopyRect
FillRect
InflateRect
OffsetRect
DefWindowProcA
CreateWindowExA
FlashWindow
SetWindowRgn
AdjustWindowRectEx
GetSystemMenu
EnableMenuItem
DrawMenuBar
GetSystemMetrics
GetDesktopWindow
IsIconic
SetClipboardData
RegisterClipboardFormatA
ShowCursor
EnumDisplaySettingsA
ChangeDisplaySettingsA
DrawStateA
DrawEdge
CreatePopupMenu
ChildWindowFromPoint
IsZoomed
ShowWindow
BringWindowToTop
CreateDialogIndirectParamA
MoveWindow
GetUpdateRect
BeginPaint
GetClientRect
DrawIcon
EndPaint
SetMenu
GetWindowRect
SetForegroundWindow
SetCursor
IsWindow
gdi32
CreateFontIndirectA
DeleteObject
GetSystemPaletteEntries
EndPage
StartPage
EndDoc
StartDocA
CreateDCA
SetAbortProc
DeleteEnhMetaFile
CopyEnhMetaFileA
GetEnhMetaFileA
EnumFontFamiliesExA
CreateDIBitmap
GetDIBColorTable
GetDIBits
CreateDIBSection
CreateICA
PatBlt
CreatePatternBrush
CreateHatchBrush
GetNearestPaletteIndex
CreatePalette
GetPaletteEntries
CreateBitmap
SetTextAlign
CreateRectRgnIndirect
RestoreDC
SaveDC
RectInRegion
PtInRegion
EqualRgn
GetRgnBox
CombineRgn
ExtCreatePen
CreateCompatibleBitmap
SetStretchBltMode
StretchDIBits
StretchBlt
GetTextExtentExPointA
GetCharABCWidthsA
SetROP2
SetBrushOrgEx
TextOutA
CreateCompatibleDC
MaskBlt
BitBlt
GetStockObject
PolyBezier
Ellipse
RoundRect
Rectangle
Polyline
PolyPolygon
SetPolyFillMode
Polygon
SetPixel
Pie
Arc
GetPixel
ExtFloodFill
SetMapMode
SetViewportExtEx
SetWindowExtEx
SetViewportOrgEx
SetWindowOrgEx
SelectClipRgn
ExtSelectClipRgn
GetClipBox
DeleteDC
GetDeviceCaps
OffsetRgn
ExtCreateRegion
SetTextColor
GetRegionData
CreateSolidBrush
SetBkMode
SelectObject
CreatePen
GdiFlush
GetTextMetricsA
GetTextExtentPoint32A
ExcludeClipRect
RealizePalette
SelectPalette
CreateRectRgn
SetBkColor
GetObjectA
LineTo
MoveToEx
GetBkColor
GetTextColor
comdlg32
GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
ChooseColorA
PrintDlgA
PageSetupDlgA
CommDlgExtendedError
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
shell32
ShellExecuteExA
ExtractIconExA
ExtractIconA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
DragQueryFileA
DragFinish
DragQueryPoint
DragAcceptFiles
SHGetSpecialFolderLocation
ole32
RegisterDragDrop
CoLockObjectExternal
OleInitialize
RevokeDragDrop
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
ReleaseStgMedium
OleGetClipboard
CoCreateInstance
OleUninitialize
Sections
.text Size: 856KB - Virtual size: 852KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 212KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ