Overview
overview
7Static
static
3speed test...UP.exe
windows7-x64
7speed test...UP.exe
windows10-2004-x64
7speed test...EL.exe
windows7-x64
7speed test...EL.exe
windows10-2004-x64
7speed test...UP.dll
windows7-x64
1speed test...UP.dll
windows10-2004-x64
1speed test...er.exe
windows7-x64
3speed test...er.exe
windows10-2004-x64
3SETUP.exe
windows7-x64
7SETUP.exe
windows10-2004-x64
7_ISDEL.exe
windows7-x64
7_ISDEL.exe
windows10-2004-x64
7_SETUP.dll
windows7-x64
1_SETUP.dll
windows10-2004-x64
1MakeHelp.bat
windows7-x64
1MakeHelp.bat
windows10-2004-x64
1hlp/NETPERSEC.doc
windows7-x64
4hlp/NETPERSEC.doc
windows10-2004-x64
1hlp/NETPERSEC.rtf
windows7-x64
4hlp/NETPERSEC.rtf
windows10-2004-x64
1MakeHelp.bat
windows7-x64
1MakeHelp.bat
windows10-2004-x64
1hlp/NETPERSEC.doc
windows7-x64
4hlp/NETPERSEC.doc
windows10-2004-x64
1hlp/NETPERSEC.rtf
windows7-x64
4hlp/NETPERSEC.rtf
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
speed test software/SETUP.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
speed test software/SETUP.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
speed test software/_ISDEL.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
speed test software/_ISDEL.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
speed test software/_SETUP.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
speed test software/_SETUP.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
speed test software/emailsender.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
speed test software/emailsender.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
SETUP.exe
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
SETUP.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
_ISDEL.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
_ISDEL.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
_SETUP.dll
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
_SETUP.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
MakeHelp.bat
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
MakeHelp.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
hlp/NETPERSEC.doc
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
hlp/NETPERSEC.doc
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
hlp/NETPERSEC.rtf
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
hlp/NETPERSEC.rtf
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
MakeHelp.bat
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
MakeHelp.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
hlp/NETPERSEC.doc
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
hlp/NETPERSEC.doc
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
hlp/NETPERSEC.rtf
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
hlp/NETPERSEC.rtf
Resource
win10v2004-20241007-en
General
-
Target
541912394ae39111994097fc40097337_JaffaCakes118
-
Size
2.0MB
-
MD5
541912394ae39111994097fc40097337
-
SHA1
d81ab50b07cd67a15be2b01eb68be1026c75ac82
-
SHA256
d5cab8127bf981cf09ef30bb32526a6b727dac926973e9e49faf5c929bb2d98e
-
SHA512
301cda988696a25d61eca25a9a7bffe931935b95fe43a0f424eed724ac1e71556ab8368139fabfd332c0fb017a9d08dfb91372cc2820fc9562ef45a9968be632
-
SSDEEP
49152:NpgPGLDQdVCXAenOZrLYK5fcbg1LYK5fcbggXAe6OE:gP2Dd3eYKZcsVYKZcsg3+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/speed test software/emailsender.exe
Files
-
541912394ae39111994097fc40097337_JaffaCakes118.zip
-
speed test software/DATA.TAG
-
speed test software/SETUP.EXE
-
speed test software/SETUP.INI
-
speed test software/_INST32I.EX_
-
speed test software/_ISDEL.EXE
-
speed test software/_SETUP.DLL
-
speed test software/_sys1.cab
-
speed test software/_user1.cab
-
speed test software/data1.cab
-
speed test software/emailsender.exe.exe windows:4 windows x86 arch:x86
21e326f170fd82d896f09f64d43c6fed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
FindExecutableA
user32
CharNextA
DefWindowProcA
GetWindowWord
SetWindowWord
BeginPaint
GetSysColor
GetClientRect
SetRect
EndPaint
RegisterClassA
OemToCharBuffA
LoadCursorA
GetLastActivePopup
ShowWindow
PostMessageA
EnableWindow
DestroyWindow
SetWindowTextA
SetForegroundWindow
SetActiveWindow
GetWindowRect
SetTimer
KillTimer
DialogBoxIndirectParamA
GetDlgItemTextA
EndDialog
SendMessageA
GetKeyState
PeekMessageA
TranslateMessage
DispatchMessageA
GetParent
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItem
InvalidateRect
UpdateWindow
wsprintfA
MessageBoxA
SetCursor
GetSystemMetrics
SetWindowPos
kernel32
LocalFileTimeToFileTime
_lread
_lwrite
LocalFree
VirtualAlloc
VirtualFree
RtlUnwind
HeapAlloc
HeapFree
GetCommandLineA
GetModuleHandleA
ExitProcess
GetACP
GetModuleFileNameA
SetErrorMode
GetVersion
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcmpiA
GetWindowsDirectoryA
GetEnvironmentVariableA
LocalAlloc
_llseek
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
FindClose
FindFirstFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
lstrlenA
CreateDirectoryA
lstrcatA
SetFileTime
_lclose
DosDateTimeToFileTime
_lcreat
lstrcpyA
_lopen
GetVolumeInformationA
WinExec
GetDriveTypeA
gdi32
GetBkColor
SetBkColor
SetTextColor
SetTextAlign
DeleteObject
GetTextExtentPoint32A
ExtTextOutA
CreateDCA
GetDeviceCaps
CreateFontIndirectA
DeleteDC
SelectObject
advapi32
RegQueryValueA
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_winzip_ Size: 490KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
speed test software/lang.dat
-
speed test software/layout.bin
-
speed test software/license.txt
-
speed test software/netpsec.zip.zip
-
DATA.TAG
-
SETUP.EXE
-
SETUP.INI
-
_INST32I.EX_
-
_ISDEL.EXE
-
_SETUP.DLL
-
_sys1.cab
-
_user1.cab
-
data1.cab
-
lang.dat
-
layout.bin
-
license.txt
-
nps_src.zip.zip
-
About.cpp
-
About.h
-
ColorDlg.cpp
-
ColorDlg.h
-
DisplayDlg.cpp
-
DisplayDlg.h
-
DlgPropSheet.cpp
-
DlgPropSheet.h
-
Global.cpp
-
Globals.h
-
Graphs.cpp
-
Graphs.h
-
Icons.cpp
-
Icons.h
-
MakeHelp.bat
-
NetPerSec.cpp
-
NetPerSec.def
-
NetPerSec.dsp
-
NetPerSec.dsw
-
NetPerSec.h
-
NetPerSec.rc
-
OptionsDlg.cpp
-
OptionsDlg.h
-
PerfData.cpp
-
PerfData.h
-
SessionDlg.cpp
-
SessionDlg.h
-
Snmp.cpp
-
Snmp.h
-
StdAfx.cpp
-
StdAfx.h
-
hlp/NETPERSEC.DOC.doc windows office2003
-
hlp/NETPERSEC.RTF.rtf
-
hlp/NetPerSec.adb
-
hlp/NetPerSec.cnt
-
hlp/NetPerSec.hbz
-
hlp/NetPerSec.hm
-
hlp/NetPerSec.kdb
-
hlp/NetPerSec.srt
-
hlp/display.bmp
-
hlp/graph.bmp
-
hlp/helpids.h
-
hlp/netpersec.hbk
-
hlp/netpersec.hpj
-
hlp/netpersec.log
-
hlp/options.bmp
-
res/NetPerSec.rc2
-
res/bargraph.ico
-
res/histogram.ico
-
res/netpersec.ico
-
resource.h
-
resource.hm
-
winproc.cpp
-
winproc.h
-
os.dat
-
readme.txt
-
setup.ins
-
setup.lid
-
speed test software/nps_src.zip.zip
-
About.cpp
-
About.h
-
ColorDlg.cpp
-
ColorDlg.h
-
DisplayDlg.cpp
-
DisplayDlg.h
-
DlgPropSheet.cpp
-
DlgPropSheet.h
-
Global.cpp
-
Globals.h
-
Graphs.cpp
-
Graphs.h
-
Icons.cpp
-
Icons.h
-
MakeHelp.bat
-
NetPerSec.cpp
-
NetPerSec.def
-
NetPerSec.dsp
-
NetPerSec.dsw
-
NetPerSec.h
-
NetPerSec.rc
-
OptionsDlg.cpp
-
OptionsDlg.h
-
PerfData.cpp
-
PerfData.h
-
SessionDlg.cpp
-
SessionDlg.h
-
Snmp.cpp
-
Snmp.h
-
StdAfx.cpp
-
StdAfx.h
-
hlp/NETPERSEC.DOC.doc windows office2003
-
hlp/NETPERSEC.RTF.rtf
-
hlp/NetPerSec.adb
-
hlp/NetPerSec.cnt
-
hlp/NetPerSec.hbz
-
hlp/NetPerSec.hm
-
hlp/NetPerSec.kdb
-
hlp/NetPerSec.srt
-
hlp/display.bmp
-
hlp/graph.bmp
-
hlp/helpids.h
-
hlp/netpersec.hbk
-
hlp/netpersec.hpj
-
hlp/netpersec.log
-
hlp/options.bmp
-
res/NetPerSec.rc2
-
res/bargraph.ico
-
res/histogram.ico
-
res/netpersec.ico
-
resource.h
-
resource.hm
-
winproc.cpp
-
winproc.h
-
speed test software/os.dat
-
speed test software/readme.txt
-
speed test software/setup.ins
-
speed test software/setup.lid