757f5a92ca1b9b4ff9c9a596901b9281_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

757f5a92ca1b9b4ff9c9a596901b9281_JaffaCakes118
Size

859KB
MD5

757f5a92ca1b9b4ff9c9a596901b9281
SHA1

e3bec67b33f75455e9089b3772aed643dc31691c
SHA256

136e4d375075ff864b3cdad31969835e4ce59847e72079a730c65efbf794a58a
SHA512

3cc44e1f1f34eea6de7bb41ee6b47f158e6a94a9378049dc91f4b4c102d76632ee015522e141f33f2c5d40f078b316f6ec7429afd53645c2019dd82e1cc218dd
SSDEEP

24576:3+l0lvDCdbycJh1hFRC61UGXGl24y3scEB:uAGb3N1Xo24Fr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cvery.comvc102543525255525/exe/NetTalk.exe

Files

757f5a92ca1b9b4ff9c9a596901b9281_JaffaCakes118
.rar
cvery.comvc102543525255525/Welcome to you.url
cvery.comvc102543525255525/doc/1.bmp
cvery.comvc102543525255525/doc/2.bmp
cvery.comvc102543525255525/doc/NetTalk技术参数.txt
cvery.comvc102543525255525/doc/Thumbs.db
cvery.comvc102543525255525/doc/bugs.txt
cvery.comvc102543525255525/doc/update.txt
cvery.comvc102543525255525/doc/特点和存在问题.txt
cvery.comvc102543525255525/doc/结构.txt
cvery.comvc102543525255525/exe/NetTalk.exe
.exe windows:4 windows x86 arch:x86

3706b85dbb95b8d5cfbc26f4019d2f5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetCurrentThreadId
GlobalAlloc
OpenFile
_lwrite
GlobalFree
lstrcpynA
GetLocalTime
GetTickCount
CreateMutexA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
_lclose
GetVersion
GetStartupInfoA
HeapAlloc
GetCommandLineA
RtlUnwind
ExitProcess
HeapFree
GetCurrentProcess
HeapReAlloc
TerminateProcess
GetProcAddress
CloseHandle
HeapSize
HeapCreate
VirtualFree
HeapDestroy
IsBadWritePtr
UnhandledExceptionFilter
VirtualAlloc
FreeEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsA
GetEnvironmentStringsW
SetHandleCount
GetEnvironmentStrings
GetFileType
WriteFile
GetStdHandle
IsBadReadPtr
IsBadCodePtr
SetUnhandledExceptionFilter
GetOEMCP
GetModuleFileNameA
WritePrivateProfileStringA
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetPrivateProfileStringA
LoadLibraryA
CreateThread
TerminateThread
Sleep
GetExitCodeThread
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
OutputDebugStringA
SetEndOfFile
ReadFile
RaiseException
GetPrivateProfileIntA

user32

SetWindowTextA
GetParent
ReleaseDC
GetDlgItem
SendMessageA
SetDlgItemTextA
EndDialog
GetDC
GetCursorPos
GetClassInfoExA
DialogBoxParamA
CreateDialogParamA
PtInRect
SetPropA
BeginPaint
RemovePropA
LoadCursorA
GetWindowThreadProcessId
DispatchMessageA
ReleaseCapture
GetDlgItemTextA
GetPropA
DefWindowProcA
RegisterClassExA
ClientToScreen
SetClassLongA
LoadStringA
GetWindowTextLengthA
SetFocus
EnableWindow
DrawIcon
OffsetRect
GetMessageA
LoadBitmapA
IsWindow
PostThreadMessageA
PostMessageA
SetTimer
KillTimer
CallWindowProcA
SendDlgItemMessageA
LoadMenuA
EndPaint
GetWindowRect
IsWindowEnabled
GetSubMenu
TrackPopupMenu
IsWindowVisible
UnregisterHotKey
RegisterHotKey
PostQuitMessage
InvalidateRect
DestroyWindow
SetWindowLongA
SetWindowRgn
GetWindowLongA
MoveWindow
LoadIconA
CreateWindowExA
SetActiveWindow
ShowWindow
SetForegroundWindow
ScreenToClient
TranslateMessage
GetMessagePos
GetWindowTextA
SetRect
SystemParametersInfoA
InflateRect
SetWindowPos
GetClientRect
FrameRect
DrawTextA
FillRect
GetCapture
LoadImageA
SetCapture
GetDlgCtrlID

gdi32

SetTextColor
FillRgn
GetStockObject
CreateFontIndirectA
CreatePolygonRgn
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
StretchBlt
LineTo
MoveToEx
CreatePen
CreateSolidBrush
GetDIBits
SetBkColor
CreateBitmap
PtInRegion
CreateCompatibleBitmap
SetBkMode

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

InitCommonControlsEx

ddraw

DirectDrawCreate

ws2_32

shutdown
inet_addr
gethostbyname
recvfrom
sendto
closesocket
htonl
socket
bind
WSACleanup
WSAStartup
htons

msvfw32

ICSeqCompressFrameEnd
DrawDibDraw
DrawDibClose
ICSeqCompressFrame
ICDecompress
DrawDibOpen
ICCompressorFree
ICClose
ICOpen
ICSendMessage
ICSeqCompressFrameStart

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

winmm

waveInPrepareHeader
waveOutReset
waveOutOpen
waveOutClose
mixerGetNumDevs
waveInOpen
mixerGetID
waveInClose
mixerSetControlDetails
mixerGetControlDetailsA
mixerClose
mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
PlaySoundA
waveOutUnprepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveInReset
waveInStart
waveOutPrepareHeader
waveOutWrite

Sections

.text
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 476KB - Virtual size: 473KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cvery.comvc102543525255525/exe/addr.db
cvery.comvc102543525255525/exe/help/copyright.htm
.html
cvery.comvc102543525255525/exe/help/cover.htm
.html
cvery.comvc102543525255525/exe/help/faq.htm
.html
cvery.comvc102543525255525/exe/help/help.htm
.html
cvery.comvc102543525255525/exe/help/image/addr.jpg
.jpg
cvery.comvc102543525255525/exe/help/image/bg.gif
.gif
cvery.comvc102543525255525/exe/help/image/chat.jpg
.jpg
cvery.comvc102543525255525/exe/help/image/connect.jpg
.jpg
cvery.comvc102543525255525/exe/help/image/connected.jpg
.jpg
cvery.comvc102543525255525/exe/help/image/f.jpg
.jpg
cvery.comvc102543525255525/exe/help/image/face.jpg
.jpg
cvery.comvc102543525255525/exe/help/image/ip.jpg
.jpg
cvery.comvc102543525255525/exe/help/image/logo.jpg
.jpg
cvery.comvc102543525255525/exe/help/image/talking.jpg
.jpg
cvery.comvc102543525255525/exe/help/left.htm
.html
cvery.comvc102543525255525/exe/help/run.htm
.html
cvery.comvc102543525255525/exe/help/step.htm
.html
cvery.comvc102543525255525/exe/help/top.htm
.html
cvery.comvc102543525255525/exe/help/tstyle/s1.css
cvery.comvc102543525255525/exe/help/tujie.htm
.html
cvery.comvc102543525255525/exe/help/use.htm
.html
cvery.comvc102543525255525/exe/log.txt
cvery.comvc102543525255525/exe/photos/12_21_58_250.bmp
cvery.comvc102543525255525/exe/photos/12_21_59_671.bmp
cvery.comvc102543525255525/exe/photos/12_22_0_281.bmp
cvery.comvc102543525255525/exe/photos/12_24_10_187.bmp
cvery.comvc102543525255525/exe/photos/12_24_20_250.bmp
cvery.comvc102543525255525/exe/photos/12_24_22_109.bmp
cvery.comvc102543525255525/exe/photos/12_24_24_781.bmp
cvery.comvc102543525255525/exe/photos/12_24_4_937.bmp
cvery.comvc102543525255525/exe/photos/12_26_27_218.bmp
cvery.comvc102543525255525/exe/photos/Thumbs.db
cvery.comvc102543525255525/project/AVIO/AVIOMgr.cpp
cvery.comvc102543525255525/project/AVIO/AudioPlay.cpp
cvery.comvc102543525255525/project/AVIO/AudioRec.cpp
cvery.comvc102543525255525/project/AVIO/VideoCapture.cpp
cvery.comvc102543525255525/project/AVIO/VolumeCtrl.cpp
cvery.comvc102543525255525/project/AVIO/WaveOut.cpp
cvery.comvc102543525255525/project/AVIO/WaveShow.cpp
cvery.comvc102543525255525/project/AVIO/wavein.cpp
cvery.comvc102543525255525/project/Codec/CodecMgr.cpp
cvery.comvc102543525255525/project/Main/Main.cpp
cvery.comvc102543525255525/project/Main/res/1011.ico
cvery.comvc102543525255525/project/Main/res/11.ico
cvery.comvc102543525255525/project/Main/res/14.ico
cvery.comvc102543525255525/project/Main/res/Main.aps
cvery.comvc102543525255525/project/Main/res/Main.rc
cvery.comvc102543525255525/project/Main/res/about1.bmp
cvery.comvc102543525255525/project/Main/res/about2.bmp
cvery.comvc102543525255525/project/Main/res/about3.bmp
cvery.comvc102543525255525/project/Main/res/addr1.bmp
cvery.comvc102543525255525/project/Main/res/addr2.bmp
cvery.comvc102543525255525/project/Main/res/addr3.bmp
cvery.comvc102543525255525/project/Main/res/call.wav
cvery.comvc102543525255525/project/Main/res/call1.bmp
cvery.comvc102543525255525/project/Main/res/call2.bmp
cvery.comvc102543525255525/project/Main/res/call3.bmp
cvery.comvc102543525255525/project/Main/res/close1.bmp
cvery.comvc102543525255525/project/Main/res/close2.bmp
cvery.comvc102543525255525/project/Main/res/close3.bmp
cvery.comvc102543525255525/project/Main/res/close4.bmp
cvery.comvc102543525255525/project/Main/res/close5.bmp
cvery.comvc102543525255525/project/Main/res/close6.bmp
cvery.comvc102543525255525/project/Main/res/error.ico
cvery.comvc102543525255525/project/Main/res/face.bmp
cvery.comvc102543525255525/project/Main/res/g.ico
cvery.comvc102543525255525/project/Main/res/hang1.bmp
cvery.comvc102543525255525/project/Main/res/hang2.bmp
cvery.comvc102543525255525/project/Main/res/hang3.bmp
cvery.comvc102543525255525/project/Main/res/help1.bmp
cvery.comvc102543525255525/project/Main/res/help2.bmp
cvery.comvc102543525255525/project/Main/res/help3.bmp
cvery.comvc102543525255525/project/Main/res/logo.bmp
cvery.comvc102543525255525/project/Main/res/logo1.bmp
cvery.comvc102543525255525/project/Main/res/main.ico
cvery.comvc102543525255525/project/Main/res/main1.ico
cvery.comvc102543525255525/project/Main/res/min1.bmp
cvery.comvc102543525255525/project/Main/res/min2.bmp
cvery.comvc102543525255525/project/Main/res/min3.bmp
cvery.comvc102543525255525/project/Main/res/msg.wav
cvery.comvc102543525255525/project/Main/res/msg1.bmp
cvery.comvc102543525255525/project/Main/res/msg2.bmp
cvery.comvc102543525255525/project/Main/res/msg3.bmp
cvery.comvc102543525255525/project/Main/res/othertit.bmp
cvery.comvc102543525255525/project/Main/res/resource.h
cvery.comvc102543525255525/project/Main/res/saveframe1.bmp
cvery.comvc102543525255525/project/Main/res/saveframe2.bmp
cvery.comvc102543525255525/project/Main/res/saveframe3.bmp
cvery.comvc102543525255525/project/Main/res/setup1.bmp
cvery.comvc102543525255525/project/Main/res/setup2.bmp
cvery.comvc102543525255525/project/Main/res/setup3.bmp
cvery.comvc102543525255525/project/Main/res/title1.bmp
cvery.comvc102543525255525/project/Main/res/title2.bmp
cvery.comvc102543525255525/project/Main/res/video1.bmp
cvery.comvc102543525255525/project/Main/res/video2.bmp
cvery.comvc102543525255525/project/Main/res/video3.bmp
cvery.comvc102543525255525/project/Main/res/video_.bmp
cvery.comvc102543525255525/project/Main/res/video_lo.bmp
cvery.comvc102543525255525/project/Main/res/video_local1.bmp
cvery.comvc102543525255525/project/Main/res/video_local2.bmp
cvery.comvc102543525255525/project/Main/res/video_local3.bmp
cvery.comvc102543525255525/project/Main/res/video_onoff1.bmp
cvery.comvc102543525255525/project/Main/res/video_onoff2.bmp
cvery.comvc102543525255525/project/Main/res/video_onoff3.bmp
cvery.comvc102543525255525/project/Main/res/video_onoff4.bmp
cvery.comvc102543525255525/project/Main/res/video_onoff5.bmp
cvery.comvc102543525255525/project/Main/res/video_onoff6.bmp
cvery.comvc102543525255525/project/Main/res/video_outview1.bmp
cvery.comvc102543525255525/project/Main/res/video_outview2.bmp
cvery.comvc102543525255525/project/Main/res/video_outview3.bmp
cvery.comvc102543525255525/project/Main/res/video_outview4.bmp
cvery.comvc102543525255525/project/Main/res/video_outview5.bmp
cvery.comvc102543525255525/project/Main/res/video_outview6.bmp
cvery.comvc102543525255525/project/Main/res/videotitle1.bmp
cvery.comvc102543525255525/project/Main/res/videotitle2.bmp
cvery.comvc102543525255525/project/Main/res/videotitle3.bmp
cvery.comvc102543525255525/project/Main/res/videotitle4.bmp
cvery.comvc102543525255525/project/Main/res/zoom1.bmp
cvery.comvc102543525255525/project/Main/res/zoom2.bmp
cvery.comvc102543525255525/project/Main/res/zoom3.bmp
cvery.comvc102543525255525/project/Mixer/VolumeInXXX.cpp
cvery.comvc102543525255525/project/Mixer/VolumeOutMaster.cpp
cvery.comvc102543525255525/project/Mixer/VolumeOutWave.cpp
cvery.comvc102543525255525/project/UI/AddrBook.cpp
cvery.comvc102543525255525/project/UI/CoolBtn.cpp
cvery.comvc102543525255525/project/UI/GraphDlg.cpp
cvery.comvc102543525255525/project/UI/MsgBox.cpp
cvery.comvc102543525255525/project/UI/MsgTalk.cpp
cvery.comvc102543525255525/project/UI/NewMsgBox.cpp
cvery.comvc102543525255525/project/UI/RippleWnd.cpp
cvery.comvc102543525255525/project/UI/SlideBar.cpp
cvery.comvc102543525255525/project/UI/Splash.cpp
cvery.comvc102543525255525/project/UI/VideoWnd.cpp
cvery.comvc102543525255525/project/UI/ddutil.cpp
cvery.comvc102543525255525/project/WndX/GDIX.CPP
cvery.comvc102543525255525/project/WndX/Hash.cpp
cvery.comvc102543525255525/project/WndX/TrayNotify.cpp
cvery.comvc102543525255525/project/WndX/UDPSocket.cpp
cvery.comvc102543525255525/project/WndX/WndX.cpp
cvery.comvc102543525255525/project/include/AVFile.h
cvery.comvc102543525255525/project/include/AVIOMgr.h
cvery.comvc102543525255525/project/include/AddrBook.h
cvery.comvc102543525255525/project/include/AudioPlay.h
cvery.comvc102543525255525/project/include/AudioRec.h
cvery.comvc102543525255525/project/include/CmdMgr.h
cvery.comvc102543525255525/project/include/CodecMgr.h
cvery.comvc102543525255525/project/include/Common.h
cvery.comvc102543525255525/project/include/CoolBtn.h
cvery.comvc102543525255525/project/include/DataBase.h
cvery.comvc102543525255525/project/include/G729a.h
cvery.comvc102543525255525/project/include/GDIX.H
cvery.comvc102543525255525/project/include/GraphDlg.h
cvery.comvc102543525255525/project/include/Hash.h
cvery.comvc102543525255525/project/include/IVolume.h
cvery.comvc102543525255525/project/include/Main.h
cvery.comvc102543525255525/project/include/MsgBox.h
cvery.comvc102543525255525/project/include/MsgTalk.h
cvery.comvc102543525255525/project/include/NewMsgBox.h
cvery.comvc102543525255525/project/include/RippleWnd.h
cvery.comvc102543525255525/project/include/SlideBar.h
cvery.comvc102543525255525/project/include/Splash.h
cvery.comvc102543525255525/project/include/TrayNotify.h
cvery.comvc102543525255525/project/include/UDPSocket.h
cvery.comvc102543525255525/project/include/VideoCapture.h
cvery.comvc102543525255525/project/include/VideoWnd.h
cvery.comvc102543525255525/project/include/VolumeCtrl.h
cvery.comvc102543525255525/project/include/VolumeInXXX.h
cvery.comvc102543525255525/project/include/VolumeOutMaster.h
cvery.comvc102543525255525/project/include/VolumeOutWave.h
cvery.comvc102543525255525/project/include/WaveOut.h
cvery.comvc102543525255525/project/include/WaveShow.h
cvery.comvc102543525255525/project/include/WndX.h
cvery.comvc102543525255525/project/include/ddutil.h
cvery.comvc102543525255525/project/include/wavein.h
cvery.comvc102543525255525/project/prj/G729a.lib
cvery.comvc102543525255525/project/prj/Main.dsp
cvery.comvc102543525255525/project/prj/nettalk.dsw
cvery.comvc102543525255525/下载说明.htm
.html .js polyglot

Sharing

General

Malware Config

Signatures

Files

3706b85dbb95b8d5cfbc26f4019d2f5a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

ddraw

ws2_32

msvfw32

avicap32

winmm

Sections

.text Size: 120KB - Virtual size: 118KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 24KB - Virtual size: 128KB

.rsrc Size: 476KB - Virtual size: 473KB

.text
Size: 120KB - Virtual size: 118KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 24KB - Virtual size: 128KB

.rsrc
Size: 476KB - Virtual size: 473KB