c:\Documents and Settings\Administrator.MICRO-89F1FD0F9\桌面\Down\NewDownLoader\NewDownLoader\Release\NewDownLoader.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0a0c2d6fad466f4cf8328e6e9bd0d53d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0a0c2d6fad466f4cf8328e6e9bd0d53d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a0c2d6fad466f4cf8328e6e9bd0d53d_JaffaCakes118
-
Size
72KB
-
MD5
0a0c2d6fad466f4cf8328e6e9bd0d53d
-
SHA1
04220bf261d306ac1e8499ff485803372e53e0e5
-
SHA256
481d998cc0ac2fcfde0f29d434a16cae2327723053904b203a686faaf75ff96b
-
SHA512
4e7d74c7aa38e4b24639bb576e5894dd0c30c175afb70e93150a81a7683a5bfbe13ec6e10c65db1c93df1bd669296f704c9a1ea2111d57e25627226bce28dd06
-
SSDEEP
1536:uABnuyRsPDmK8hH5MDf9ygnBIDfyLltLV:Duy9gcDfyJtLV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a0c2d6fad466f4cf8328e6e9bd0d53d_JaffaCakes118
Files
-
0a0c2d6fad466f4cf8328e6e9bd0d53d_JaffaCakes118.exe windows:4 windows x86 arch:x86
d72b0020e1ca3eceee9137a726984435
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WriteFile
SetFilePointer
GetProcAddress
GetCurrentProcessId
OpenProcess
LoadLibraryA
GetSystemTime
Process32FirstW
GetTempPathW
FreeLibrary
LoadLibraryW
Sleep
Process32NextW
CreateFileA
HeapSize
CloseHandle
CreateToolhelp32Snapshot
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLastError
HeapFree
HeapAlloc
WideCharToMultiByte
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSection
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
user32
wsprintfW
DispatchMessageW
GetMessageW
TranslateMessage
winmm
timeGetTime
psapi
GetModuleFileNameExW
shlwapi
PathFindFileNameW
wininet
InternetCloseHandle
InternetReadFile
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ