Static task
static1
Behavioral task
behavioral1
Sample
Saint Seiya - tmhx (C).exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Saint Seiya - tmhx (C).exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
.url
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
.url
Resource
win10v2004-20241007-en
General
-
Target
558c6e3a31b4cbf4c92319c16dd2cbbf_JaffaCakes118
-
Size
775KB
-
MD5
558c6e3a31b4cbf4c92319c16dd2cbbf
-
SHA1
17afd93b3aeb8ed722d2698f2afeed17d628cdbd
-
SHA256
17a72182ba0f4a7229b1443b7429e8982ccd165b4328d1dcaa61b6db756bf22b
-
SHA512
5b693c7ba69a939552a82f408976b725b3debb1bfb3637dd0c9e16850c58a907920c7c564abe052582a22a5c817df303a3335ca74edf2b2f2e8a6c959837ccf5
-
SSDEEP
24576:ZA/8apTd7lOAZZiwMn0+X9olX34uh0Pk3a:ZA005lVYH029yXourq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Saint Seiya - tmhx (C).exe
Files
-
558c6e3a31b4cbf4c92319c16dd2cbbf_JaffaCakes118.zip
-
Saint Seiya - tmhx (C).exe.exe windows:5 windows x86 arch:x86
1fdc284ebef30b7b67971f56d0e11a5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
comctl32
ImageList_LoadImageA
ImageList_ReplaceIcon
ImageList_Create
ord6
ord17
ImageList_Destroy
imm32
ImmAssociateContext
shlwapi
PathFindExtensionA
PathUnquoteSpacesA
PathIsRelativeA
PathAppendA
PathCanonicalizeA
kernel32
CreateThread
CreateDirectoryA
lstrcmpiA
SetThreadPriority
SetEvent
ResetEvent
CreateEventA
lstrcmpA
FindNextFileA
FindFirstFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
QueryPerformanceFrequency
QueryPerformanceCounter
GetUserDefaultLCID
FindClose
WideCharToMultiByte
LoadLibraryW
lstrcatA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetPrivateProfileStructA
WritePrivateProfileStringA
WritePrivateProfileStructA
ReleaseMutex
CreateMutexA
GetModuleFileNameA
GetCurrentThreadId
GetLocalTime
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
WaitForSingleObject
GetModuleFileNameW
GetStdHandle
ExitProcess
GetModuleHandleW
GetStartupInfoW
HeapSetInformation
GetCommandLineA
ExitThread
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
HeapFree
HeapAlloc
SetLastError
InterlockedDecrement
ResumeThread
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
LCMapStringW
HeapSize
GetStringTypeW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
Sleep
FreeLibrary
LoadLibraryA
GetProcAddress
GetTempPathA
DeleteFileA
OutputDebugStringW
lstrlenA
lstrcpyA
SetStdHandle
FlushFileBuffers
HeapReAlloc
InterlockedIncrement
SetFilePointer
WriteFile
ReadFile
CloseHandle
CreateFileW
CreateFileA
GetLastError
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
TerminateThread
WriteConsoleW
SetEndOfFile
GetProcessHeap
HeapCreate
InitializeCriticalSection
user32
SetWindowPlacement
SetForegroundWindow
RedrawWindow
SetMenu
GetWindowPlacement
DrawMenuBar
PostQuitMessage
CreateWindowExA
ModifyMenuA
GetMenuStringA
EnableMenuItem
IsWindowVisible
SetScrollInfo
GetScrollInfo
InvertRect
FillRect
CheckRadioButton
DrawEdge
GetMenuItemCount
GetMenuItemID
GetDlgItemInt
SetDlgItemInt
CheckMenuItem
GetAsyncKeyState
InsertMenuA
DeleteMenu
SetRect
ClientToScreen
GetCursorPos
ReleaseDC
GetParent
CheckDlgButton
GetSystemMetrics
GetSubMenu
DispatchMessageA
IsDlgButtonChecked
InvalidateRect
TrackPopupMenu
DestroyMenu
LoadMenuA
SetFocus
MoveWindow
ScreenToClient
SetWindowPos
ShowWindow
GetWindowTextLengthA
GetFocus
MessageBeep
GetWindowRect
DestroyWindow
CreateDialogParamA
GetDlgItemTextA
SetTimer
MessageBoxA
KillTimer
PostMessageA
SetWindowTextA
EnableWindow
GetWindowTextA
DefWindowProcA
LoadStringA
SendDlgItemMessageA
wsprintfA
SetDlgItemTextA
GetDlgItem
SendMessageA
LoadCursorA
EndDialog
DialogBoxParamA
BeginPaint
EndPaint
PtInRect
SetCursor
CallWindowProcA
IsWindow
GetClientRect
GetDC
GetWindowLongA
DrawTextA
OffsetRect
SetWindowLongA
LoadIconA
TranslateMessage
GetMessageA
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
IsDialogMessageA
FindWindowA
UpdateWindow
RegisterClassExA
gdi32
TextOutA
GetStockObject
GetObjectA
AnimatePalette
SetBkColor
CreatePalette
StretchDIBits
SelectPalette
RealizePalette
ExtTextOutA
CreateFontIndirectA
SetBkMode
SetTextColor
GetSystemPaletteEntries
DeleteObject
SelectObject
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
DragAcceptFiles
DragFinish
DragQueryFileA
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
avifil32
AVIFileInit
AVIStreamSetFormat
AVIStreamRelease
AVIFileRelease
AVIMakeCompressedStream
AVIFileCreateStreamA
AVIStreamWrite
AVIFileExit
AVIFileOpenA
msvfw32
ICCompressorFree
ICCompressorChoose
wsock32
recvfrom
sendto
socket
setsockopt
htonl
htons
bind
WSAAsyncSelect
listen
connect
accept
inet_ntoa
recv
send
WSAGetLastError
WSACancelAsyncRequest
shutdown
closesocket
ioctlsocket
WSAAsyncGetHostByName
inet_addr
WSAStartup
WSACleanup
version
GetFileVersionInfoSizeA
Sections
.text Size: 647KB - Virtual size: 646KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
.txt
-
.url