4b38deca5420564c8b4c04604adc93bf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4b38deca5420564c8b4c04604adc93bf_JaffaCakes118
Size

530KB
MD5

4b38deca5420564c8b4c04604adc93bf
SHA1

8fa5541f99b9fe69d025f53452cd9bfc72d332c6
SHA256

b09da35e7f9a851ad2dc2970681d0f7fae7da5a581f190250027256cb3526349
SHA512

6ec4646467141b4c88c8a7ef79c478673fd14062676a17bc5c44d6fd674e61f269b701d3e9c9dc513eb8019cd16d3135e5b306b1cf3614c6cda91cfacd383e86
SSDEEP

12288:1u/dcymxSebtK3NG0Y+O7fEzX7jstEeKdvQP:w/SyVe87Y++fEzvsSLd4P

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HA_SKinerToo2.1_yfy/SKINNER.BAK
unpack001/HA_SKinerToo2.1_yfy/SKINNER.EXE

Files

4b38deca5420564c8b4c04604adc93bf_JaffaCakes118
.rar
HA_SKinerToo2.1_yfy/FlyingRain_winamp2.wsz
.zip
balance.bmp
cbuttons.bmp
eq_ex.bmp
eqmain.bmp
main.bmp
monoster.bmp
numbers.bmp
playpaus.bmp
pledit.bmp
pledit.txt
posbar.bmp
shufrep.bmp
text.bmp
titlebar.bmp
viscolor.txt
volume.bmp
HA_SKinerToo2.1_yfy/FlyingRain_winamp3.wal
.zip
pic\buttons.png
.png
pic\eq-bg.png
.png
pic\font.png
.png
pic\numfont.png
.png
pic\player-bg.png
.png
pic\thinger-bg.png
.png
screenshot.png
.png
scripts\firststart.maki
scripts\main.maki
skin.xml
.xml
xml\color-presets.xml
xml\eq.xml
xml\player.xml
xml\thinger.xml
HA_SKinerToo2.1_yfy/SKINNER.BAK
.exe windows:4 windows x86 arch:x86

8d10a112fbaaa6985f82bbdf24413eac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
WriteFile
lstrcmpA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
CreateDirectoryA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
GetProcAddress
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetLocalTime
SystemTimeToFileTime
FileTimeToDosDateTime
QueryPerformanceFrequency
RemoveDirectoryA
GetFileSize
LockFile
UnlockFile
ReadFile
SetCurrentDirectoryA
FindFirstFileA
FindNextFileA
GetLastError
FindClose
WritePrivateProfileStringA
GetCurrentDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
DeleteFileA
SetEndOfFile
GetModuleFileNameA
lstrcpyA
lstrcatA
GetTempPathA
SizeofResource
lstrlenA
FindResourceA
LoadResource
LockResource
FreeResource
LocalAlloc
SetFilePointer
LocalFree
CreateFileA
GetEnvironmentStrings
CloseHandle

user32

KillTimer
SetClassLongA
SetDlgItemInt
GetWindowRect
GetSubMenu
TrackPopupMenu
OffsetRect
ReleaseDC
SetTimer
LoadImageA
MessageBoxA
SendDlgItemMessageA
CheckDlgButton
PtInRect
IsWindowEnabled
SetCapture
ReleaseCapture
GetDC
TranslateMessage
IsDialogMessageA
DispatchMessageA
GetMessageA
GetParent
SetWindowLongA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextA
GetDlgItemInt
PostMessageA
EndDialog
GetSysColor
FrameRect
GetDlgItem
GetWindowLongA
InvalidateRect
wsprintfA
EnableWindow
DialogBoxParamA
WinHelpA
BeginPaint
GetClientRect
CopyRect
GetSysColorBrush
FillRect
DrawEdge
InflateRect
EndPaint
SendMessageA
CreateDialogParamA
MoveWindow
LoadMenuA
DestroyMenu
PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
FindWindowA
SetWindowTextA

gdi32

DeleteObject
CreateCompatibleDC
SelectObject
GetDIBits
DeleteDC
CreateBitmap
SetDIBitsToDevice
CreateFontA
GetStockObject
SetBkMode
CreateSolidBrush
Polygon
EnumFontFamiliesExA
PatBlt
TextOutA
SetTextColor
GetTextExtentPoint32A
SetTextAlign
SetBkColor

comdlg32

GetOpenFileNameA
GetSaveFileNameA
ChooseColorA

advapi32

RegDeleteKeyA
RegOpenKeyA
RegEnumValueA
RegCloseKey
RegDeleteValueA

shell32

ShellExecuteA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 232KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA64
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
HA_SKinerToo2.1_yfy/SKINNER.EXE
.exe windows:4 windows x86 arch:x86

8d10a112fbaaa6985f82bbdf24413eac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
WriteFile
lstrcmpA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
CreateDirectoryA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
GetProcAddress
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetLocalTime
SystemTimeToFileTime
FileTimeToDosDateTime
QueryPerformanceFrequency
RemoveDirectoryA
GetFileSize
LockFile
UnlockFile
ReadFile
SetCurrentDirectoryA
FindFirstFileA
FindNextFileA
GetLastError
FindClose
WritePrivateProfileStringA
GetCurrentDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
DeleteFileA
SetEndOfFile
GetModuleFileNameA
lstrcpyA
lstrcatA
GetTempPathA
SizeofResource
lstrlenA
FindResourceA
LoadResource
LockResource
FreeResource
LocalAlloc
SetFilePointer
LocalFree
CreateFileA
GetEnvironmentStrings
CloseHandle

user32

KillTimer
SetClassLongA
SetDlgItemInt
GetWindowRect
GetSubMenu
TrackPopupMenu
OffsetRect
ReleaseDC
SetTimer
LoadImageA
MessageBoxA
SendDlgItemMessageA
CheckDlgButton
PtInRect
IsWindowEnabled
SetCapture
ReleaseCapture
GetDC
TranslateMessage
IsDialogMessageA
DispatchMessageA
GetMessageA
GetParent
SetWindowLongA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextA
GetDlgItemInt
PostMessageA
EndDialog
GetSysColor
FrameRect
GetDlgItem
GetWindowLongA
InvalidateRect
wsprintfA
EnableWindow
DialogBoxParamA
WinHelpA
BeginPaint
GetClientRect
CopyRect
GetSysColorBrush
FillRect
DrawEdge
InflateRect
EndPaint
SendMessageA
CreateDialogParamA
MoveWindow
LoadMenuA
DestroyMenu
PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
FindWindowA
SetWindowTextA

gdi32

DeleteObject
CreateCompatibleDC
SelectObject
GetDIBits
DeleteDC
CreateBitmap
SetDIBitsToDevice
CreateFontA
GetStockObject
SetBkMode
CreateSolidBrush
Polygon
EnumFontFamiliesExA
PatBlt
TextOutA
SetTextColor
GetTextExtentPoint32A
SetTextAlign
SetBkColor

comdlg32

GetOpenFileNameA
GetSaveFileNameA
ChooseColorA

advapi32

RegDeleteKeyA
RegOpenKeyA
RegEnumValueA
RegCloseKey
RegDeleteValueA

shell32

ShellExecuteA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 232KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA64
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
HA_SKinerToo2.1_yfy/key.txt
HA_SKinerToo2.1_yfy/project/最后方案.spf
HA_SKinerToo2.1_yfy/skinner.GID
HA_SKinerToo2.1_yfy/skinner.hlp
HA_SKinerToo2.1_yfy/skinner.ini
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/balance.png
.png
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/cbuttons_mask.bmp
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/eq_ex.png
.png
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/eq_ex_mask.bmp
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/eqmain.png
.png
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/eqmain_mask.bmp
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/main_mask.bmp
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/monoster_mask.bmp
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/pledit.png
.png
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/pledit_mask.bmp
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/posbar.png
.png
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/shufrep_mask.bmp
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/titlebar_mask.bmp
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp2x/volume.png
.png
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp3/buttons.png
.png
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp3/buttons_mask.bmp
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp3/eq-bg_mask.bmp
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp3/player-bg_mask.bmp
HA_SKinerToo2.1_yfy/templates/圆角风格/winamp3/thinger-bg_mask.bmp
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/balance.png
.png
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/balance_mask.bmp
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/cbuttons_mask.bmp
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/eq_ex.png
.png
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/eq_ex_mask.bmp
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/eqmain.png
.png
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/eqmain_mask.bmp
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/main_mask.bmp
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/monoster_mask.bmp
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/pledit.png
.png
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/pledit_mask.bmp
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/posbar.png
.png
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/posbar_mask.bmp
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/shufrep_mask.bmp
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/titlebar_mask.bmp
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/volume.png
.png
HA_SKinerToo2.1_yfy/templates/完全透明风格/winamp2x/volume_mask.bmp
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/balance.png
.png
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/cbuttons_mask.bmp
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/eq_ex.png
.png
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/eq_ex_mask.bmp
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/eqmain.png
.png
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/eqmain_mask.bmp
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/main_mask.bmp
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/monoster_mask.bmp
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/pledit.png
.png
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/pledit_mask.bmp
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/posbar.png
.png
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/posbar_mask.bmp
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/shufrep_mask.bmp
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/titlebar_mask.bmp
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp2x/volume.png
.png
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp3/buttons.png
.png
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp3/buttons_mask.bmp
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp3/eq-bg_mask.bmp
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp3/player-bg_mask.bmp
HA_SKinerToo2.1_yfy/templates/透明三维风格/winamp3/thinger-bg_mask.bmp
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/balance.png
.png
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/cbuttons.png
.png
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/eq_ex.png
.png
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/eq_ex_mask.bmp
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/eqmain.png
.png
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/eqmain_mask.bmp
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/main_mask.bmp
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/monoster.png
.png
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/pledit.png
.png
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/pledit_mask.bmp
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/posbar.png
.png
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/shufrep.png
.png
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/titlebar.png
.png
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/titlebar_mask.bmp
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp2x/volume.png
.png
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp3/buttons.png
.png
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp3/eq-bg_mask.bmp
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp3/player-bg_mask.bmp
HA_SKinerToo2.1_yfy/templates/阴影按钮风格/winamp3/thinger-bg_mask.bmp
HA_SKinerToo2.1_yfy/下载说明.htm
.html .js polyglot
HA_SKinerToo2.1_yfy/汉化说明.txt
HA_SKinerToo2.1_yfy/简易皮肤制作教程.txt
HA_SKinerToo2.1_yfy/飞雨汉化室.url
.url
下载说明.htm
.html .js polyglot

Sharing

General

Malware Config

Signatures

Files

8d10a112fbaaa6985f82bbdf24413eac

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 232KB - Virtual size: 229KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 40KB - Virtual size: 50KB

_DATA64 Size: 8KB - Virtual size: 4KB

.rsrc Size: 92KB - Virtual size: 89KB

8d10a112fbaaa6985f82bbdf24413eac

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 232KB - Virtual size: 229KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 40KB - Virtual size: 50KB

_DATA64 Size: 8KB - Virtual size: 4KB

.rsrc Size: 92KB - Virtual size: 89KB

.text
Size: 232KB - Virtual size: 229KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 40KB - Virtual size: 50KB

_DATA64
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 92KB - Virtual size: 89KB

.text
Size: 232KB - Virtual size: 229KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 40KB - Virtual size: 50KB

_DATA64
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 92KB - Virtual size: 89KB