058621a7fa415fc5eb40ec28355e5f46_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

058621a7fa415fc5eb40ec28355e5f46_JaffaCakes118
Size

173KB
MD5

058621a7fa415fc5eb40ec28355e5f46
SHA1

4d685db0d62960c1da0d4c70e8b25a214af8e16d
SHA256

fc662299276d24e1f7085976292f6e17b07a542a82ca8f33e6c28facfe19309a
SHA512

1dc709f9f9a78bd076f275db41f239a12bc998b259d105606e898bdd774f85b5df3505dc6768bbcac27da85d8e7daa99327a4d6202a508d5e8fd914edc806908
SSDEEP

3072:/StgaPmaUxaPg0kU46OdHz9g84u9+xIMr5cSpnyP5M5E8TE4BLJRxoiOQX4WzG6+:/SaauvagFdNExIMr5K+BzRxobQPs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WaterMark/WaterMark.exe

Files

058621a7fa415fc5eb40ec28355e5f46_JaffaCakes118
.rar
WaterMark/Mytoolsoft Watermark Software V2.7.7.0 绿色旗舰汉化版.txt
WaterMark/WaterMark.exe
.exe windows:4 windows x86 arch:x86

96d772bafcc7008d1fd48d716926c18d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapAlloc
GetProcessHeap
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
FreeLibrary
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
WaitForSingleObject
CopyFileW
GetLocalTime
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
WideCharToMultiByte
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapSize
Sleep
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
HeapCreate
HeapDestroy
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetVersionExA
MulDiv
CreateDirectoryW
GetModuleFileNameW
CreateFileW
GetFileSize
CloseHandle
lstrcpyW
GetFileAttributesW
FindFirstFileW
GetFullPathNameW
FindClose
FindNextFileW
lstrlenW
CreateThread
OutputDebugStringW
DebugBreak
SetLastError
CompareStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
InterlockedIncrement
lstrlenA
lstrcmpW
GetThreadLocale
GetStringTypeExW
MultiByteToWideChar
InterlockedDecrement
GetVersionExW
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetTickCount

user32

DrawTextW
UpdateWindow
GetWindowTextLengthW
SetRectEmpty
TranslateMessage
DrawFocusRect
LoadBitmapW
LoadImageW
GetWindowDC
IsDialogMessageW
GetCursorPos
FrameRect
ReleaseCapture
IsWindowEnabled
FillRect
GetFocus
GetClassNameW
DrawEdge
CallWindowProcW
SetWindowLongW
GetWindowLongW
CreateWindowExW
DestroyWindow
MoveWindow
GetWindowRect
CharLowerW
CreateDialogParamW
SetCursor
IsWindowVisible
GetWindowTextW
GetClientRect
InvalidateRect
ShowWindow
SetCapture
GetParent
GetDlgCtrlID
SetWindowPos
CopyRect
PtInRect
InflateRect
OffsetRect
SendMessageW
GetSysColor
DefWindowProcW
BeginPaint
EndPaint
GetDC
ReleaseDC
RegisterWindowMessageW
GetSystemMetrics
UnregisterClassW
GetActiveWindow
PostQuitMessage
GetCapture
PeekMessageW
DispatchMessageW
GetMessageW
RegisterClassExW
LoadCursorW
SystemParametersInfoW
DeleteMenu
DestroyMenu
SetWindowTextW
GetSystemMenu
GetDlgItemInt
SetDlgItemInt
SetDlgItemTextW
GetDlgItem
ScreenToClient
EnableWindow
GetDlgItemTextW
MessageBoxW
SetRect
LoadStringW
CharNextW
CharUpperW
SetTimer
KillTimer
UnregisterClassA
IsWindow
GetClassInfoExW
DialogBoxParamW
EndDialog
wvsprintfW
SetFocus
MapWindowPoints
GetWindow
FindWindowExW
PostMessageW

gdi32

SetTextColor
SetPolyFillMode
SetBkMode
SetBkColor
RealizePalette
Rectangle
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
EnumFontFamiliesExW
GetObjectW
DPtoLP
ExtTextOutW
GetTextExtentPoint32W
CreatePalette
DeleteObject
SelectObject
Polygon
CreatePen
CreateSolidBrush
GetDeviceCaps
CreateFontIndirectW
DeleteDC
SelectPalette
GetStockObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseColorW

advapi32

RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey

shell32

DragFinish
DragAcceptFiles
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
DragQueryFileW

ole32

CoTaskMemAlloc
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoInitialize

oleaut32

VarUI4FromStr

comctl32

_TrackMouseEvent
InitCommonControlsEx

gdiplus

GdipDrawEllipseI
GdipDrawLineI
GdipDrawImageRectRectI
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipSetImageAttributesColorMatrix
GdipSetPropertyItem
GdipGetAllPropertyItems
GdipGetPropertySize
GdipSaveImageToStream
GdipSaveImageToFile
GdipDeletePen
GdipCreatePen1
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdiplusStartup
GdiplusShutdown
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipSetImagePalette
GdipGetImagePixelFormat
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDrawString
GdipFillRectangle
GdipSetSmoothingMode
GdipMeasureString
GdipSetStringFormatAlign
GdipBitmapSetResolution
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImageVerticalResolution
GdipGetImageHorizontalResolution
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawImageRectI
GdipSetInterpolationMode
GdipGetImageHeight
GdipGetImageWidth
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipCloneImage
GdipCloneBrush
GdipDrawImageI
GdipFillRectangleI
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipCreateSolidFill
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipDeleteGraphics
GdipDeleteBrush
GdipAlloc
GdipFree
GdipSetStringFormatLineAlign
GdipDrawLine
GdipStringFormatGetGenericTypographic

Sections

.text
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
WaterMark/WaterMark.wri
.wri .rtf
WaterMark/demo.bmp
.png
WaterMark/example.jpg
.jpg
WaterMark/images/lock.gif
.gif

Sharing

General

Malware Config

Signatures

Files

96d772bafcc7008d1fd48d716926c18d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

gdiplus

Sections

.text Size: 172KB - Virtual size: 170KB

.rdata Size: 48KB - Virtual size: 45KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 32KB - Virtual size: 28KB

.text
Size: 172KB - Virtual size: 170KB

.rdata
Size: 48KB - Virtual size: 45KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 32KB - Virtual size: 28KB