5effe4cf2ff9349e111666d811f4061a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5effe4cf2ff9349e111666d811f4061a_JaffaCakes118
Size

2.1MB
MD5

5effe4cf2ff9349e111666d811f4061a
SHA1

051eef9c620c284622bb2b565b5da221427da164
SHA256

f56d72df0b021cab628304c0d26203a39d0c3de95e3d54fe3395a777709572f8
SHA512

5d81364af154e237012b813bab43b640eb0b8bff12dcd21e3f9eb97ce524b19e2789d5bf0f107979738d38a5c4123f6939824a69d8a611f2e10ee9a9ae73b00a
SSDEEP

49152:U4jwuPgIO51aXuHvmTHKrMufu/2H6Zu502313YFP91gD:Bkg3QaXuHv8KYX2H6ZuK0kDgD

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/vkeditor_demo.exe
unpack001/vkeditor_full.exe

Files

5effe4cf2ff9349e111666d811f4061a_JaffaCakes118
.zip
ReadMe.txt
vkeditor_demo.exe
.exe windows:5 windows x86 arch:x86

ca608aa5d9abcfe4b1e07867d9b47f77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueA
RegSetValueExA
RegCreateKeyExA
GetUserNameA
RegQueryValueExA

user32

CreateIconIndirect
GetActiveWindow
SendMessageA
GetKeyState
GetSystemMetrics
GetDoubleClickTime
GetSysColor
SystemParametersInfoA
IsClipboardFormatAvailable
LoadImageA
LoadIconA
GetIconInfo
GetClipboardData
EmptyClipboard
OpenClipboard
CloseClipboard
SetClipboardData
RegisterClipboardFormatA
GetClipboardFormatNameA
SetWindowTextW
SetWindowTextA
DestroyIcon
AdjustWindowRect
IsIconic
IsZoomed
MessageBeep
GetWindowPlacement
BeginPaint
EndPaint
DefWindowProcW
GetKeyboardLayout
PostMessageA
LoadCursorA
RegisterClassW
CreateWindowExW
GetDC
GetUpdateRgn
HideCaret
ValidateRect
ScrollWindow
AdjustWindowRectEx
SetWindowPos
GetWindowRect
GetClientRect
ClientToScreen
CreateCaret
SetCaretPos
ShowCaret
UnregisterHotKey
ReleaseCapture
MsgWaitForMultipleObjects
SetCursor
DestroyCursor
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageW
DispatchMessageA
GetCursorPos
ReleaseDC
GetCapture
SetCapture
GetFocus
SetFocus
GetForegroundWindow
GetParent
SetForegroundWindow
GetWindowLongA
SetWindowLongA
UpdateWindow
ShowWindow
DestroyCaret
GetWindow
SetTimer
PostThreadMessageA
DestroyWindow
PostQuitMessage
DefWindowProcA
PeekMessageA
IsWindowUnicode
PeekMessageW
InvalidateRect
MessageBoxA

gdi32

CreateFontA
ExtTextOutW
GetClipRgn
ExtSelectClipRgn
CreateDCA
GetROP2
GetCurrentObject
GetBkColor
GetTextColor
SetROP2
Polyline
PolyPolyline
MoveToEx
LineTo
RectVisible
Ellipse
Arc
Polygon
PolyPolygon
CreatePatternBrush
SetTextColor
SetBkColor
PatBlt
CreateRectRgnIndirect
CreatePen
GetCharWidthW
GetNearestColor
CreateICA
GetCharABCWidthsA
SetBkMode
SetTextAlign
GetViewportOrgEx
GetDeviceCaps
LPtoDP
CreatePalette
SetMapMode
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
CreateSolidBrush
CreateDIBitmap
GetObjectA
GetDIBits
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
SetDIBitsToDevice
CreateBitmap
BitBlt
SelectObject
DeleteDC
StretchDIBits
SelectPalette
RealizePalette
CreateRectRgn
SelectClipRgn
DeleteObject
GdiFlush
GetCharABCWidthsW
EnumFontFamiliesA
GetTextMetricsA
GetStockObject

kernel32

GlobalFree
SetLastError
TlsFree
TlsSetValue
CreateFileW
GetProcessHeap
SetStdHandle
SetEnvironmentVariableA
CompareStringW
IsValidLocale
EnumSystemLocalesA
TlsGetValue
TlsAlloc
GetCPInfo
LCMapStringW
GetSystemTimeAsFileTime
GetModuleFileNameW
GetFileType
WriteConsoleW
HeapFree
HeapAlloc
RaiseException
ExitProcess
GetModuleHandleW
GetStartupInfoW
HeapSetInformation
GetCommandLineA
RtlUnwind
DecodePointer
EncodePointer
InterlockedExchange
GetLocaleInfoW
GetCurrentProcess
GlobalMemoryStatus
GetUserDefaultLCID
VirtualAlloc
VirtualFree
OutputDebugStringA
FreeLibrary
CreateSemaphoreA
ReleaseSemaphore
SetUnhandledExceptionFilter
GetLocalTime
IsBadReadPtr
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
SetEvent
CreateEventA
GetVersionExA
FindFirstFileA
DeleteFileA
MoveFileA
FindNextFileA
FindClose
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
ReadFile
SetFilePointer
SetEndOfFile
CreateFileA
GetFileSize
GetStdHandle
WriteFile
CloseHandle
InterlockedDecrement
ExpandEnvironmentStringsA
GetStringTypeW
VirtualQuery
FlushFileBuffers
HeapReAlloc
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
LoadLibraryW
GetCurrentProcessId
HeapCreate
InitializeCriticalSectionAndSpinCount
SetHandleCount
HeapSize
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileSectionNamesA
InitializeCriticalSection
GetModuleHandleA
GlobalSize
GlobalAlloc
GetLocaleInfoA
WaitForSingleObject
LoadLibraryA
GetProcAddress
GetVersion
QueryPerformanceCounter
GetLastError
GetCurrentThreadId
DeleteCriticalSection
GlobalLock
GlobalUnlock
SetFileAttributesA
CreateThread
Sleep
GetTickCount
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
IsProcessorFeaturePresent

shell32

ShellExecuteA

winmm

PlaySoundA

ole32

CoCreateGuid
DoDragDrop
CoTaskMemFree
ReleaseStgMedium
OleUninitialize
OleInitialize
RevokeDragDrop
RegisterDragDrop

ws2_32

closesocket
recv
send
ntohl
accept
connect
htons
htonl
bind
WSAGetLastError
select
WSAStartup
gethostbyname
setsockopt
ioctlsocket
socket

Exports

Exports

pcre_callout
pcre_compile
pcre_compile2
pcre_config
pcre_copy_named_substring
pcre_copy_substring
pcre_dfa_exec
pcre_exec
pcre_free
pcre_free_substring
pcre_free_substring_list
pcre_fullinfo
pcre_get_named_substring
pcre_get_stringnumber
pcre_get_stringtable_entries
pcre_get_substring
pcre_get_substring_list
pcre_info
pcre_maketables
pcre_malloc
pcre_refcount
pcre_stack_free
pcre_stack_malloc
pcre_study
pcre_version

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 517KB - Virtual size: 517KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 203KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vkeditor_full.exe
.exe windows:5 windows x86 arch:x86

4dc5d85d26d6e537895d818c9abd64b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
GetUserNameA

user32

InvalidateRect
CreateIconIndirect
LoadImageA
LoadIconA
GetIconInfo
GetClipboardData
GetKeyState
GetActiveWindow
GetSystemMetrics
GetDoubleClickTime
GetSysColor
SystemParametersInfoA
IsClipboardFormatAvailable
SendMessageA
EmptyClipboard
OpenClipboard
CloseClipboard
SetClipboardData
RegisterClipboardFormatA
GetClipboardFormatNameA
SetWindowTextW
SetWindowTextA
DestroyIcon
MessageBeep
GetWindowPlacement
BeginPaint
EndPaint
DefWindowProcW
GetKeyboardLayout
PostMessageA
LoadCursorA
RegisterClassW
CreateWindowExW
GetDC
GetUpdateRgn
HideCaret
ValidateRect
ScrollWindow
AdjustWindowRectEx
SetWindowPos
GetWindowRect
GetClientRect
ClientToScreen
CreateCaret
SetCaretPos
ShowCaret
UnregisterHotKey
ReleaseCapture
MsgWaitForMultipleObjects
SetCursor
DestroyCursor
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageW
DispatchMessageA
GetCursorPos
ReleaseDC
GetCapture
SetCapture
GetFocus
SetFocus
GetForegroundWindow
GetParent
SetForegroundWindow
GetWindowLongA
SetWindowLongA
UpdateWindow
DestroyCaret
GetWindow
SetTimer
MessageBoxA
PostThreadMessageA
DestroyWindow
PostQuitMessage
DefWindowProcA
PeekMessageA
IsWindowUnicode
PeekMessageW
AdjustWindowRect
IsIconic
IsZoomed
ShowWindow

gdi32

ExtSelectClipRgn
CreateDCA
GetROP2
GetCurrentObject
GetBkColor
GetTextColor
SetROP2
Polyline
PolyPolyline
MoveToEx
LineTo
RectVisible
Ellipse
Arc
Polygon
PolyPolygon
CreatePatternBrush
SetTextColor
SetBkColor
PatBlt
CreateRectRgnIndirect
CreatePen
GetStockObject
GetNearestColor
GetTextMetricsA
CreateICA
GetClipRgn
SetTextAlign
GetViewportOrgEx
GetDeviceCaps
LPtoDP
CreatePalette
SetMapMode
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
CreateSolidBrush
CreateDIBitmap
GetObjectA
GetDIBits
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
SetDIBitsToDevice
CreateBitmap
BitBlt
SelectObject
DeleteDC
StretchDIBits
SelectPalette
RealizePalette
CreateRectRgn
SelectClipRgn
DeleteObject
GdiFlush
GetCharWidthW
GetCharABCWidthsW
EnumFontFamiliesA
ExtTextOutW
CreateFontA
SetBkMode
GetCharABCWidthsA

kernel32

TlsGetValue
TlsAlloc
GetProcessHeap
CreateFileW
SetEnvironmentVariableW
CompareStringW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetStringTypeW
VirtualQuery
GetCPInfo
LCMapStringW
ExitThread
ExitProcess
GetModuleHandleW
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
GetModuleFileNameW
GetFileType
WriteConsoleW
HeapFree
RaiseException
GetSystemTimeAsFileTime
RtlUnwind
DecodePointer
EncodePointer
InterlockedExchange
GetLocaleInfoW
GetCurrentProcess
GlobalMemoryStatus
FreeLibrary
VirtualAlloc
VirtualFree
OutputDebugStringA
ReadFile
SetFilePointer
SetEndOfFile
GetFileSize
GetStdHandle
SetUnhandledExceptionFilter
GetLocalTime
WriteFile
IsBadReadPtr
GetModuleFileNameA
GetVersionExA
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateEventA
SetEvent
CreateSemaphoreA
ReleaseSemaphore
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
GetUserDefaultLCID
GetDriveTypeA
FindFirstFileA
CreateFileA
CloseHandle
DeleteFileA
MoveFileA
FindNextFileA
FindClose
LeaveCriticalSection
EnterCriticalSection
CreateDirectoryA
InterlockedDecrement
InterlockedIncrement
GetCurrentDirectoryA
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
SetHandleCount
LoadLibraryW
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
HeapCreate
IsProcessorFeaturePresent
HeapSize
SetLastError
TlsFree
Sleep
GetTickCount
CreateThread
GlobalFree
TlsSetValue
GlobalUnlock
GlobalLock
GetLastError
InitializeCriticalSection
GetModuleHandleA
GlobalSize
GlobalAlloc
GetLocaleInfoA
WaitForSingleObject
LoadLibraryA
GetProcAddress
GetVersion
DeleteCriticalSection
InterlockedExchangeAdd
GetCurrentThreadId
QueryPerformanceCounter

shell32

ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc

winmm

PlaySoundA

ole32

CoCreateGuid
DoDragDrop
CoTaskMemFree
ReleaseStgMedium
OleUninitialize
OleInitialize
RevokeDragDrop
RegisterDragDrop

ws2_32

ntohl
accept
recv
closesocket
gethostbyname
connect
htons
htonl
bind
WSAGetLastError
select
WSAStartup
send
setsockopt
ioctlsocket
socket

Sections

.text
Size: 978KB - Virtual size: 977KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 828KB - Virtual size: 828KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca608aa5d9abcfe4b1e07867d9b47f77

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

user32

gdi32

kernel32

shell32

winmm

ole32

ws2_32

Exports

Exports

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 517KB - Virtual size: 517KB

.data Size: 115KB - Virtual size: 291KB

.tls Size: 17KB - Virtual size: 16KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 203KB - Virtual size: 202KB

4dc5d85d26d6e537895d818c9abd64b8

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

user32

gdi32

kernel32

shell32

winmm

ole32

ws2_32

Sections

.text Size: 978KB - Virtual size: 977KB

.rdata Size: 828KB - Virtual size: 828KB

.data Size: 132KB - Virtual size: 309KB

.tls Size: 17KB - Virtual size: 16KB

.rsrc Size: 98KB - Virtual size: 97KB

.reloc Size: 208KB - Virtual size: 208KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 517KB - Virtual size: 517KB

.data
Size: 115KB - Virtual size: 291KB

.tls
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 203KB - Virtual size: 202KB

.text
Size: 978KB - Virtual size: 977KB

.rdata
Size: 828KB - Virtual size: 828KB

.data
Size: 132KB - Virtual size: 309KB

.tls
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 98KB - Virtual size: 97KB

.reloc
Size: 208KB - Virtual size: 208KB