GetNewInf
GetNewSock
Overview
overview
7Static
static
3NTLEA.exe
windows7-x64
7NTLEA.exe
windows10-2004-x64
7neko.dll
windows7-x64
3neko.dll
windows10-2004-x64
3ntleac.exe
windows7-x64
3ntleac.exe
windows10-2004-x64
3ntleah.dll
windows7-x64
3ntleah.dll
windows10-2004-x64
3ntleap.dll
windows7-x64
3ntleap.dll
windows10-2004-x64
3乐趣下载.url
windows7-x64
1乐趣下载.url
windows10-2004-x64
1使用说明.url
windows7-x64
1使用说明.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
NTLEA.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
NTLEA.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
neko.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
neko.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
ntleac.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
ntleac.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
ntleah.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
ntleah.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
ntleap.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
ntleap.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
乐趣下载.url
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
乐趣下载.url
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
使用说明.url
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
使用说明.url
Resource
win10v2004-20240709-en
Target
6f05e43f84fc49848eddf9b22b9675c6_JaffaCakes118
Size
1.4MB
MD5
6f05e43f84fc49848eddf9b22b9675c6
SHA1
45a99b55d119fa7ab3980fc6bb5e2fd12e5bd11d
SHA256
29f3a91e166e214a077f075a840ebfb7efdaede73e73627ba7f3bc11cba93221
SHA512
212fc2c9e0fc813210a692ebc038f006dcecf0b8098ff12bc9c11f5a1a3ac73a6b9f9b6dcd3e8c3126ccbc76c1ae7465c6cf1352c13b64e881d398943ae9aa2a
SSDEEP
24576:MxqIG11RBt0+kZimfbQtygkJLLUMuK/QjxPR+bnVarMCYmu7HFi+1djvB2XdMd+:Mxwt0+k0SNJLVuAUiTmwFi6djvsXad+
Checks for missing Authenticode signature.
resource |
---|
unpack001/NTLEA.exe |
unpack001/neko.dll |
unpack001/ntleac.exe |
unpack001/ntleah.dll |
unpack001/ntleap.dll |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
DefWindowProcA
AdjustWindowRectEx
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PlaySoundA
midiStreamRestart
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader
CreateMutexA
ReleaseMutex
GlobalFlags
SetErrorMode
GetProcessVersion
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
TerminateProcess
ExitThread
HeapSize
GetACP
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
SuspendThread
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetEnvironmentVariableW
SetEnvironmentVariableA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetStdHandle
SetThreadPriority
ResumeThread
GetCurrentThread
lstrcmpA
FormatMessageA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpynA
SetLastError
SetCommTimeouts
SetCommMask
GetCommState
SetCommState
WriteFile
ReadFile
PurgeComm
WaitCommEvent
ClearCommError
GetLastError
WaitForMultipleObjects
GetOverlappedResult
GetCommModemStatus
SetEvent
GetProfileStringA
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetComputerNameA
EscapeCommFunction
CreateEventA
ResetEvent
OutputDebugStringA
ExpandEnvironmentStringsA
GlobalAlloc
GetTempPathA
SetFileAttributesA
GetFileAttributesA
MoveFileA
CopyFileA
CreateDirectoryA
SetVolumeLabelA
GetDiskFreeSpaceA
SetLocalTime
GetCommandLineA
CreateProcessW
SetCurrentDirectoryA
GetCurrentThreadId
GetModuleHandleA
GlobalSize
GlobalLock
GlobalFree
lstrcatA
WinExec
lstrcpyA
GetCurrentDirectoryA
GetLogicalDriveStringsA
GetDriveTypeA
GetVolumeInformationA
GlobalUnlock
GlobalReAlloc
HeapFree
HeapReAlloc
ExitProcess
HeapAlloc
WaitForSingleObject
GetProcessHeap
FindResourceA
LoadResource
LockResource
CreateThread
DeleteFileA
RemoveDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
Sleep
MulDiv
OpenFile
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
CloseHandle
DeviceIoControl
GetVersionExA
GetFullPathNameA
lstrlenW
lstrlenA
GetUserDefaultLCID
GetTickCount
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
HeapDestroy
LoadStringA
UnregisterClassA
GetDesktopWindow
GetClassNameA
CharUpperA
EndDialog
CreateDialogIndirectParamA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
GetScrollPos
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
RegisterWindowMessageA
GetWindowPlacement
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
CopyAcceleratorTableA
IsZoomed
GetSystemMenu
DeleteMenu
WindowFromPoint
LoadIconA
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
GetMessageA
SetRectEmpty
RegisterClipboardFormatA
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
SetCursor
InvertRect
TrackPopupMenu
SetForegroundWindow
ValidateRect
LockWindowUpdate
MessageBeep
IsClipboardFormatAvailable
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
WaitForInputIdle
SetCursorPos
SetMenu
SetFocus
PeekMessageA
IsIconic
SetActiveWindow
DestroyMenu
SetWindowPos
GetActiveWindow
GetTopWindow
GetWindow
DestroyAcceleratorTable
DestroyCursor
SetWindowRgn
ScreenToClient
ChildWindowFromPointEx
PostMessageA
WinHelpA
KillTimer
SetTimer
GetScrollRange
SetScrollRange
SetScrollPos
SetParent
IsWindowVisible
GetWindowLongA
SetWindowLongA
TranslateMessage
DispatchMessageA
UpdateWindow
GetDC
ReleaseDC
LoadImageA
MessageBoxA
LoadBitmapA
GetKeyState
DestroyIcon
IsChild
IsRectEmpty
GetFocus
IntersectRect
EqualRect
GetMenu
GetSubMenu
EnableMenuItem
PostQuitMessage
GetSysColorBrush
AdjustWindowRect
LoadCursorA
GetCapture
ClientToScreen
wsprintfA
GetDlgCtrlID
InvalidateRect
ReleaseCapture
GetMessagePos
PtInRect
GetClientRect
GetCursorPos
SetCapture
SystemParametersInfoA
EnableWindow
SetRect
IsWindow
RedrawWindow
CopyRect
FillRect
GetSystemMetrics
DrawFrameControl
DrawEdge
InflateRect
OffsetRect
DrawFocusRect
GetWindowRect
GetParent
SendMessageA
GetSysColor
ScrollDC
CreateRoundRectRgn
CreateEllipticRgn
PathToRegion
EndPath
BeginPath
GetClipBox
SetTextColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
MoveToEx
LineTo
GetBkMode
GetSystemPaletteEntries
ExtSelectClipRgn
GetViewportExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextMetricsA
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
StartPage
EndPage
DPtoLP
CreateBrushIndirect
CreateHatchBrush
CreatePatternBrush
Ellipse
RoundRect
FillRgn
GetCurrentObject
CombineRgn
CreateRectRgn
GetClipRgn
CreatePolygonRgn
SelectPalette
GetDIBits
CreateDIBSection
ExtCreateRegion
CreateRectRgnIndirect
CreateDCA
StartDocA
GetPixel
SetPixelV
LPtoDP
GetObjectA
GetDeviceCaps
RealizePalette
CreatePen
GetTextExtentPoint32A
CreateFontIndirectA
CreatePalette
Pie
Chord
Arc
Polygon
EndDoc
Rectangle
SelectClipRgn
CreateDIBitmap
CreateCompatibleBitmap
CreateBitmap
SetBkColor
SelectObject
SetStretchBltMode
StretchBlt
DeleteDC
DeleteObject
GetWindowExtEx
GetViewportOrgEx
GetWindowOrgEx
PatBlt
CreateCompatibleDC
BitBlt
CreateSolidBrush
GetStockObject
GetTextColor
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseFontA
PrintDlgA
CommDlgExtendedError
ChooseColorA
SetFormA
AddFormA
ClosePrinter
DocumentPropertiesA
OpenPrinterA
EnumFormsA
GetFormA
DeleteFormA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
Shell_NotifyIconA
ShellExecuteA
ord17
ImageList_Destroy
ImageList_LoadImageA
OleRun
CoCreateInstance
CreateStreamOnHGlobal
CLSIDFromString
OleUninitialize
OleInitialize
CLSIDFromProgID
ord252
ord253
VarDateFromStr
SafeArrayPutElement
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetElement
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
VariantCopy
UnRegisterTypeLi
SysAllocString
VariantCopyInd
VariantInit
VariantChangeType
VariantClear
GetActiveObject
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
closesocket
WSAAsyncSelect
htons
bind
htonl
socket
setsockopt
sendto
recvfrom
select
gethostbyname
inet_ntoa
inet_addr
gethostbyaddr
gethostname
WSACleanup
WSAStartup
send
ioctlsocket
connect
recv
listen
getpeername
accept
GetNewInf
GetNewSock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateProcessW
CreateRemoteThread
ExitProcess
FlushInstructionCache
GetBinaryTypeW
GetCommandLineW
GetCurrentDirectoryW
GetEnvironmentVariableW
GetFileSize
GetFullPathNameW
GetLastError
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetSystemDirectoryW
GetThreadContext
GetWindowsDirectoryW
HeapAlloc
HeapCreate
CreateMutexA
LocalFree
MapViewOfFile
ReadFile
ReadProcessMemory
ResumeThread
RtlMoveMemory
SetFilePointer
Sleep
SuspendThread
UnmapViewOfFile
VirtualAllocEx
VirtualProtect
WaitForMultipleObjects
WideCharToMultiByte
WriteProcessMemory
lstrcatW
lstrcpyW
lstrcpynW
lstrlenW
CreateFileW
CreateFileMappingA
CreateFileA
CreateEventA
LoadLibraryW
CloseHandle
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SHGetPathFromIDListW
CommandLineToArgvW
SHBrowseForFolderW
MessageBoxA
GetOpenFileNameW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TlsAlloc
HeapCreate
CreateThread
TlsGetValue
HeapAlloc
GetLastError
SetLastError
TlsSetValue
lstrcmpiA
GlobalFindAtomA
GlobalAddAtomA
WideCharToMultiByte
MultiByteToWideChar
IsBadWritePtr
GetModuleHandleA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetVersionExA
LoadLibraryA
GetProcAddress
GetACP
GetOEMCP
GetCPInfo
CreateFileA
CompareStringA
CreateProcessA
CreateProcessW
GetTimeZoneInformation
GetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetSystemDefaultLCID
GetUserDefaultLCID
GetSystemDefaultLangID
GetUserDefaultLangID
GetCommandLineA
GetCommandLineW
IsDBCSLeadByte
OpenEventA
SetEvent
IsDBCSLeadByteEx
SetUnhandledExceptionFilter
TerminateProcess
ExitProcess
HeapFree
GetModuleHandleW
GetSystemDirectoryW
lstrcatW
LoadLibraryW
VirtualProtect
FlushInstructionCache
CreateFileW
GetSystemDirectoryA
lstrlenA
lstrcatA
lstrlenW
ReadFile
CreateEventA
ReadProcessMemory
WriteProcessMemory
ResumeThread
Sleep
SuspendThread
GetThreadContext
VirtualAllocEx
CreateRemoteThread
WaitForMultipleObjects
GetCurrentThreadId
GetClassInfoA
GetClassInfoW
IsWindowUnicode
GetClassNameA
CallNextHookEx
GetPropA
SetPropA
GetWindowLongA
SetWindowLongW
CallWindowProcA
GetWindowLongW
RemovePropA
CallWindowProcW
SendMessageW
PostMessageW
SendNotifyMessageW
SendMessageCallbackW
SendMessageTimeoutW
DialogBoxIndirectParamW
CreateDialogIndirectParamW
CreateDialogParamW
DialogBoxParamW
DefWindowProcA
DefMDIChildProcA
DefDlgProcA
DefFrameProcA
DialogBoxParamA
DialogBoxIndirectParamA
CreateDialogIndirectParamA
CreateDialogParamA
CreateWindowExA
SetWindowTextA
GetWindowTextA
SendMessageA
SendMessageCallbackA
SendMessageTimeoutA
SendNotifyMessageA
PostMessageA
SetWindowLongA
GetMenuStringA
CharPrevA
CharNextA
CharPrevExA
CharNextExA
GetMenuStringW
GetMenuItemInfoW
SetMenuItemInfoW
GetWindowTextW
wsprintfA
GetForegroundWindow
MessageBoxA
SetWindowTextW
CreateWindowExW
DefWindowProcW
DefMDIChildProcW
DefDlgProcW
DefFrameProcW
SetWindowsHookExA
SetWindowsHookExW
UnhookWindowsHookEx
VerQueryValueA
EnumFontFamiliesExA
CreateFontIndirectA
CreateFontIndirectW
RtlMultiByteToUnicodeSize
RtlUnicodeToMultiByteSize
RtlOemToUnicodeN
RtlUnicodeToOemN
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyA
GetModuleFileNameW
lstrcatW
CreateFileW
GetFileSize
VirtualAlloc
ReadFile
CloseHandle
VirtualFree
lstrcatA
NtleaGetVersionString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ