d:\BuildServer\1\work-trunk\core-repository\trunk\Downloader\Release\Blizzard Downloader.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e152c1c8142e64a3fb6948178145c9d7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e152c1c8142e64a3fb6948178145c9d7_JaffaCakes118
-
Size
5.0MB
-
MD5
e152c1c8142e64a3fb6948178145c9d7
-
SHA1
8a95b9e3ad354068bb2eafca366527554c020869
-
SHA256
fe316604e4d7a95004708b80f39d3b92b7119445399f52537b36b33f7c633ba6
-
SHA512
d4590192a8e199bee9e8f6d566e85f80c3cff20c4bdd0fc960e2812c1a3c6be8bf0b6df46ddeaa2f3ac7a7d455d6288168cb8a6632d869148cab106d61acb342
-
SSDEEP
98304:f6+YFp+t4ymlPcIy/A6CZXyrwGgTVMoEMTsSSI1O:f6+j6yQPcIy/A6brTsMoEwsfIo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e152c1c8142e64a3fb6948178145c9d7_JaffaCakes118
Files
-
e152c1c8142e64a3fb6948178145c9d7_JaffaCakes118.exe windows:5 windows x86 arch:x86
0543805e56cc0e4952790fa94f2573c9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetReadFileExA
HttpQueryInfoA
InternetSetOptionA
InternetConnectA
InternetSetStatusCallbackA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetCrackUrlA
InternetSetCookieW
InternetCrackUrlW
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetReadFile
InternetSetStatusCallbackW
InternetSetOptionW
HttpQueryInfoW
InternetReadFileExW
InternetCloseHandle
InternetGetConnectedState
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
comctl32
InitCommonControlsEx
kernel32
GetModuleHandleW
GetCurrentThreadId
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetProcessHeap
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetDriveTypeA
GetCurrentDirectoryA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetEnvironmentStringsW
DeleteFileW
GetUserDefaultLangID
CreateThread
GetProcAddress
LoadLibraryW
FreeLibrary
GetSystemInfo
GetCurrentProcessId
GetCommandLineW
LocalFree
OpenMutexW
CreateMutexW
CreateFileW
GetLastError
CreateEventW
WaitForSingleObject
SetEvent
WriteFile
CloseHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
InitializeCriticalSectionAndSpinCount
GetFileType
SetHandleCount
HeapSize
GetStdHandle
GetCPInfo
LCMapStringW
LCMapStringA
SetConsoleCtrlHandler
ExitThread
GetFullPathNameW
GetComputerNameA
CreateProcessA
SuspendThread
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
HeapFree
ExitProcess
RtlUnwind
RaiseException
UnhandledExceptionFilter
InterlockedExchange
FindResourceW
LoadResource
LockResource
SizeofResource
FreeResource
LocalAlloc
MulDiv
GlobalAlloc
GlobalFree
SetLastError
GetVersionExA
SetFileTime
SetFileAttributesW
SetEndOfFile
RemoveDirectoryW
SetFilePointer
GetShortPathNameW
GetDiskFreeSpaceExW
FlushFileBuffers
FindNextFileW
ReadFile
GetFileSizeEx
GetSystemTimeAsFileTime
OutputDebugStringA
IsDebuggerPresent
GetModuleFileNameA
Thread32Next
Thread32First
CreateToolhelp32Snapshot
TerminateProcess
GetExitCodeProcess
GetCurrentProcess
GetVersion
IsBadReadPtr
VirtualAlloc
VirtualFree
VirtualQuery
SetUnhandledExceptionFilter
LoadLibraryA
InterlockedCompareExchange
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleHandleA
GlobalMemoryStatus
Sleep
ResumeThread
SetThreadPriority
GetThreadPriority
TlsGetValue
TlsFree
QueryPerformanceCounter
GetTickCount
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
lstrcpynA
IsBadWritePtr
GetThreadContext
GetFileAttributesA
OpenThread
GetLocalTime
GetFileAttributesW
CreateDirectoryW
CreateProcessW
GetComputerNameW
FormatMessageA
SetThreadAffinityMask
TlsAlloc
QueryPerformanceFrequency
InterlockedDecrement
InterlockedIncrement
FindClose
FindFirstFileW
GetCurrentDirectoryW
GetTempPathW
MultiByteToWideChar
WideCharToMultiByte
TlsSetValue
GetVersionExW
IsBadStringPtrA
GetDiskFreeSpaceW
Module32NextW
Module32FirstW
CreateFileA
GetFileAttributesExW
GetFileSize
SetCurrentDirectoryW
MoveFileW
GetTempFileNameW
user32
SetWindowLongW
ReleaseDC
GetWindowRect
LoadBitmapW
FillRect
GetDC
GetWindowTextLengthW
SetTimer
RegisterRawInputDevices
ModifyMenuW
GetMenu
MoveWindow
ScreenToClient
LoadImageW
InvalidateRect
EndDialog
SetDlgItemTextW
BringWindowToTop
CreateDialogParamW
EnableWindow
DestroyWindow
KillTimer
GetWindowTextW
ShowWindow
PostMessageW
SetForegroundWindow
EnumWindows
GetDlgItem
SetWindowTextW
LoadIconW
SendMessageW
DialogBoxParamW
MessageBoxW
EnableMenuItem
DefWindowProcW
GetWindowDC
OffsetRect
ClientToScreen
SetRect
DrawTextW
InflateRect
LoadMenuW
LoadAcceleratorsW
SetWindowsHookExW
GetMenuItemCount
GetSubMenu
IsIconic
DrawIcon
DestroyMenu
UnhookWindowsHookEx
TranslateAcceleratorW
CallNextHookEx
GetDlgCtrlID
GetClientRect
GetSystemMetrics
SetWindowPos
GetScrollInfo
CheckDlgButton
CopyImage
CallWindowProcW
GetWindowLongW
TrackMouseEvent
SetWindowRgn
IsWindowEnabled
DrawIconEx
CreateWindowExW
PtInRect
IsZoomed
TrackPopupMenu
SetMenuDefaultItem
IsWindow
RemoveMenu
GetSystemMenu
DestroyIcon
EndPaint
BeginPaint
DrawFocusRect
GetParent
GetFocus
SetCapture
ReleaseCapture
GetClassNameW
IsMenu
GetMenuItemID
GetMenuStringW
GetMenuItemInfoW
RemovePropW
GetPropW
SetCursor
LoadCursorW
GetCapture
SetPropW
EnumChildWindows
SystemParametersInfoW
GetWindowPlacement
SetWindowPlacement
IsDlgButtonChecked
IsWindowVisible
FindWindowW
gdi32
CreateEllipticRgn
CreatePolygonRgn
CreateFontIndirectW
DeleteObject
SelectObject
StretchBlt
CreateCompatibleBitmap
SetTextColor
GetObjectW
SetBkMode
GetStockObject
CreatePen
LineTo
MoveToEx
Rectangle
ExcludeClipRect
CreateSolidBrush
SetPixel
SetBkColor
DeleteDC
GetTextColor
RestoreDC
CreateCompatibleDC
SaveDC
CreateDIBSection
CreateRectRgn
GetPixel
BitBlt
GetTextExtentPoint32W
CreateRectRgnIndirect
SelectClipRgn
GetDeviceCaps
comdlg32
GetSaveFileNameW
shell32
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
CommandLineToArgvW
ShellExecuteW
SHGetSpecialFolderPathW
Shell_NotifyIconW
ole32
CoCreateInstance
OleCreate
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSetContainedObject
OleDuplicateData
ReleaseStgMedium
OleCreateStaticFromData
OleInitialize
CoInitialize
CoUninitialize
msimg32
AlphaBlend
TransparentBlt
iphlpapi
GetAdaptersInfo
GetTcpTable
rpcrt4
UuidCreate
ws2_32
__WSAFDIsSet
sendto
inet_addr
ntohl
getpeername
getsockname
ntohs
inet_ntoa
send
recv
WSACleanup
accept
ioctlsocket
select
WSAGetLastError
WSASetLastError
WSAStartup
setsockopt
getsockopt
socket
closesocket
connect
listen
bind
htons
gethostname
gethostbyname
htonl
advapi32
GetUserNameW
RegEnumKeyExW
MapGenericMask
AccessCheck
OpenThreadToken
DuplicateToken
GetFileSecurityW
OpenProcessToken
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExA
RegQueryValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
oleaut32
SysStringLen
SysFreeString
VariantInit
SysAllocString
VariantClear
OleLoadPicture
Sections
.text Size: 934KB - Virtual size: 934KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 205KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE