Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Overview
overview
7Static
static
7cwllkv25/PlayGame.exe
windows7-x64
7cwllkv25/PlayGame.exe
windows10-2004-x64
7cwllkv25/cwllk.exe
windows7-x64
3cwllkv25/cwllk.exe
windows10-2004-x64
3cwllkv25/�....5.url
windows7-x64
1cwllkv25/�....5.url
windows10-2004-x64
1cwllkv25/�...��.url
windows7-x64
1cwllkv25/�...��.url
windows10-2004-x64
1安装程序.exe
windows7-x64
7安装程序.exe
windows10-2004-x64
7Behavioral task
behavioral1
Sample
cwllkv25/PlayGame.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cwllkv25/PlayGame.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
cwllkv25/cwllk.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
cwllkv25/cwllk.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
cwllkv25/宠物连连看 V2.5.url
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
cwllkv25/宠物连连看 V2.5.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
cwllkv25/宠物连连看.url
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
cwllkv25/宠物连连看.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
安装程序.exe
Resource
win7-20240903-en
Target
e240e02ac29dc402d6f87ec156234ebb_JaffaCakes118
Size
2.4MB
MD5
e240e02ac29dc402d6f87ec156234ebb
SHA1
f8eefcc26455f651ce56a8a6f70922aaf0521ce6
SHA256
513e8a64414c344fbcf82b8c530fab70c12322c9de0c7ef3428581b5decbb6e4
SHA512
6735540b69d6254d1e7d70462b542cbdaabbde574c28a2d211f910008bd1ec8cbe438cb5b19654d2bee578cb7d25ed0743507025311fbbfde4969fa334194f94
SSDEEP
49152:dca4CQheSHJ9sAZa2A/D5V9N5FVdmK0CklW+QtUYvjlmEEA1zLi+Aua:CHfsAZq5TZVEW+Qt3ZxLi+a
resource | yara_rule |
---|---|
static1/unpack001/cwllkv25/PlayGame.exe | aspack_v212_v242 |
resource | yara_rule |
---|---|
static1/unpack001/安装程序.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/cwllkv25/cwllk.exe |
unpack002/out.upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
setsockopt
gethostbyname
htonl
ioctlsocket
htons
WSACleanup
WSAStartup
ntohl
inet_addr
HttpQueryInfoA
CertFreeCertificateContext
CertCloseStore
CertVerifySubjectCertificateContext
CertFindCertificateInStore
CertCreateCertificateContext
CryptGetMessageCertificates
CryptVerifyMessageSignature
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
waveInStop
waveInAddBuffer
waveInStart
waveInGetNumDevs
waveOutGetNumDevs
waveInClose
waveOutGetDevCapsA
waveOutPrepareHeader
waveOutWrite
waveOutReset
waveOutUnprepareHeader
waveOutClose
waveInReset
waveInUnprepareHeader
waveInPrepareHeader
waveInOpen
waveInGetDevCapsA
timeGetTime
waveOutOpen
timeKillEvent
timeSetEvent
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
GetSystemDefaultLangID
GetSystemInfo
GetUserDefaultLangID
ExitThread
GlobalFree
GetFileAttributesA
GetFileAttributesW
LockResource
LoadResource
FindResourceExA
FindResourceExW
GlobalAlloc
CreateThread
GetModuleHandleA
GetTimeZoneInformation
GetSystemTime
SystemTimeToFileTime
DeleteFileA
DeleteFileW
FreeLibrary
MoveFileW
RemoveDirectoryA
RemoveDirectoryW
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
ReadFile
WriteFile
GetTempFileNameA
GetTempPathA
GetTempFileNameW
GetTempPathW
SetFilePointer
GetFileSize
GetFileAttributesExA
GetFileAttributesExW
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindClose
ExpandEnvironmentStringsA
GetSystemDirectoryA
GetModuleFileNameA
MoveFileExA
CreateMutexA
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
WaitForSingleObject
WideCharToMultiByte
GlobalUnlock
GlobalLock
IsDBCSLeadByteEx
lstrlenA
SetEndOfFile
CopyFileA
CopyFileW
GetModuleFileNameW
GetCommandLineW
ExitProcess
GetCommandLineA
GetProcessTimes
GetCurrentProcess
CreateEventA
SetEvent
TlsAlloc
SetThreadPriority
InterlockedIncrement
InterlockedDecrement
ResetEvent
WaitForMultipleObjects
VirtualFree
VirtualAlloc
GetThreadPriority
GetCurrentThread
HeapFree
GetLastError
GetStartupInfoA
CreateProcessA
CloseHandle
LCMapStringW
LCMapStringA
GetTickCount
GetCurrentThreadId
GetLocaleInfoA
SetErrorMode
LoadLibraryA
GetProcAddress
QueryPerformanceCounter
QueryPerformanceFrequency
IsDBCSLeadByte
GetACP
GetCPInfo
MultiByteToWideChar
GetVersionExA
VirtualQuery
InterlockedExchange
InterlockedCompareExchange
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
HeapAlloc
GetProcessHeap
MoveFileA
DialogBoxParamW
InvalidateRect
EndPaint
FillRect
BeginPaint
DestroyMenu
DestroyWindow
DefWindowProcA
UpdateWindow
KillTimer
ReleaseCapture
SetTimer
SetCapture
TrackPopupMenu
GetSubMenu
LoadCursorA
ShowWindow
GetKeyState
MapVirtualKeyA
WaitForInputIdle
CheckMenuItem
EnableMenuItem
LoadStringA
LoadMenuA
GetCursorPos
SetCursor
GetMenu
GetFocus
AttachThreadInput
GetWindowThreadProcessId
WindowFromPoint
GetCapture
ClientToScreen
DeleteMenu
GetMenuItemID
IsWindow
RegisterClipboardFormatA
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
SetClipboardData
EmptyClipboard
InsertMenuA
InsertMenuW
RemoveMenu
MessageBoxA
UnregisterClassA
EnableWindow
GetDlgItemTextA
GetWindowTextLengthA
IsWindowEnabled
LoadStringW
SetMenu
SetDlgItemTextW
GetDlgItemTextW
GetWindowTextLengthW
PostQuitMessage
GetMenuStringA
GetMenuStringW
RegisterClassA
TranslateAcceleratorA
LoadAcceleratorsA
PostThreadMessageA
GetQueueStatus
PeekMessageA
MsgWaitForMultipleObjects
RegisterWindowMessageA
SetWindowTextA
GetMenuItemCount
GetMenuItemInfoA
GetSystemMetrics
GetWindowLongA
GetDlgItem
GetWindowRect
ScreenToClient
MoveWindow
SetWindowLongA
SetDlgItemTextA
GetClientRect
SetFocus
EndDialog
InsertMenuItemA
CreateWindowExA
DdeInitializeA
DdeCreateStringHandleA
DdeConnect
DdeClientTransaction
DdeDisconnect
DdeFreeStringHandle
DdeUninitialize
SendInput
GetKeyboardLayout
GetDC
ReleaseDC
TranslateMessage
DispatchMessageA
GetMessageA
DialogBoxParamA
SystemParametersInfoA
DialogBoxIndirectParamW
DialogBoxIndirectParamA
PostMessageA
GetParent
SetWindowPos
GetDesktopWindow
LoadIconA
GetWindow
SendMessageA
GetDoubleClickTime
ExtTextOutW
SetTextColor
GetTextMetricsA
ExtTextOutA
SelectClipRgn
GetClipRgn
CreateRectRgn
GetTextAlign
GetBkMode
GetTextColor
EnumFontFamiliesA
BeginPath
EndPage
SetTextCharacterExtra
FillPath
ExtCreatePen
StrokePath
EndDoc
StartDocA
LPtoDP
CreateSolidBrush
GetClipBox
GetSystemPaletteEntries
CreatePalette
GetTextExtentPoint32A
CreatePen
GetBkColor
SetBkColor
GetCurrentObject
GetTextExtentPoint32W
DPtoLP
EndPath
SetPolyFillMode
MoveToEx
LineTo
PolyBezierTo
SelectClipPath
SaveDC
RestoreDC
GdiFlush
DeleteObject
SelectObject
StretchDIBits
SetDIBitsToDevice
CreateCompatibleBitmap
GetObjectA
CreateCompatibleDC
DeleteDC
CreateDIBSection
GetDeviceCaps
BitBlt
RealizePalette
SelectPalette
GetStockObject
CreateFontIndirectA
SetBkMode
SetTextAlign
IntersectClipRect
StartPage
GetOpenFileNameA
PrintDlgA
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
GetSaveFileNameA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegQueryValueExW
RegOpenKeyExW
RegSetValueA
DragQueryFileA
DragAcceptFiles
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHAppBarMessage
DragQueryFileW
CoTaskMemAlloc
CoFreeUnusedLibraries
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
SysFreeString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ