151103fc734ed36579f709a8f44ea11f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

151103fc734ed36579f709a8f44ea11f_JaffaCakes118
Size

5.0MB
MD5

151103fc734ed36579f709a8f44ea11f
SHA1

f871409c5979ad7697506d91e5d91c2679d37d3b
SHA256

0fe374f5fb92a52df9f2f13f389f0b6500b92b7d69379a2fa06bb0d1fe8885cd
SHA512

9694ea64cc46f4e563e2c36488d762031c7ec6654eab7b8983c044668443f78cc2f37974ab22b40ecdb051205616755f4417157550df037fbace64c672184dad
SSDEEP

98304:xR/Uq23GUv129mSG8z+pqqoan20k7vjFeGFTUSRX6xz9UauWT:xR8q23GUv1P3Y+pqqofvAGx3wSav

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
151103fc734ed36579f709a8f44ea11f_JaffaCakes118

Files

151103fc734ed36579f709a8f44ea11f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5855842c34820bfbff3b6bb558e67025

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\金山快盘\Projects\temp\GMUnpacker\ReleaseGMUnpacker.pdb

Imports

kernel32

GetProcAddress
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
SizeofResource
FreeResource
GlobalUnlock
LockResource
GlobalLock
GlobalFree
GlobalAlloc
FindResourceW
LoadResource
MulDiv
InterlockedDecrement
InterlockedIncrement
GetFileSize
WriteFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
CreateFileA
SetStdHandle
GetStringTypeW
GetStringTypeA
GetConsoleMode
SetEndOfFile
GetLocaleInfoA
LoadLibraryA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
RtlUnwind
RaiseException
HeapReAlloc
CreateThread
ExitThread
GetStartupInfoA
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
lstrlenW
GetLongPathNameW
GetTempFileNameW
SetFileTime
GetFullPathNameW
GetTempPathW
MultiByteToWideChar
WideCharToMultiByte
ResumeThread
GetCurrentThreadId
WaitForSingleObject
GetLastError
GetTickCount
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
lstrcmpW
CreateFileW
ReadFile
SetFilePointer
ResetEvent
SetEvent
CreateEventW
CloseHandle
GetModuleHandleW
WinExec
CreateProcessW
Sleep
GetConsoleCP
GetModuleFileNameW

user32

GetSysColor
ClientToScreen
ShowCaret
CreateCaret
CreateAcceleratorTableW
SetCaretPos
HideCaret
InvalidateRgn
PostQuitMessage
SetWindowLongW
GetWindowLongW
SetWindowPos
DestroyAcceleratorTable
KillTimer
ShowWindow
RedrawWindow
MoveWindow
OffsetRect
FillRect
DrawTextW
GetParent
GetActiveWindow
GetWindowRect
SystemParametersInfoW
IsZoomed
GetWindowTextW
GetWindowTextLengthW
SetTimer
DrawIconEx
CharPrevW
CharNextW
SetCursor
IntersectRect
IsRectEmpty
CallWindowProcW
DefWindowProcW
LoadImageW
RegisterClassW
SetPropW
EnableWindow
DestroyIcon
RegisterClassExW
GetPropW
LoadCursorW
GetClassInfoExW
LoadBitmapW
CharNextA
LoadStringW
GetMessageW
InvalidateRect
MonitorFromWindow
DispatchMessageW
UpdateLayeredWindow
GetUpdateRect
SetWindowRgn
IsIconic
GetDC
TranslateMessage
IsWindow
SendMessageW
GetFocus
SetFocus
IsChild
SetCapture
ScreenToClient
GetMonitorInfoW
PostMessageW
BeginPaint
CreateWindowExW
PtInRect
EndPaint
GetCursorPos
DestroyWindow
GetKeyState
ReleaseDC
ReleaseCapture
GetClientRect
GetWindow
MapWindowPoints
SetWindowTextW

gdi32

DeleteDC
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectW
CreateRectRgnIndirect
GetObjectW
GetStockObject
CreatePen
SelectObject
CombineRgn
BitBlt
GetTextMetricsW
CreateRectRgn
DeleteObject
SetBitmapBits
SelectClipRgn
SetTextColor
RoundRect
GetCharABCWidthsW
SetBkMode
ExtTextOutW
GetTextExtentPoint32W
CreateSolidBrush
GetClipBox
CreateRoundRectRgn
ExtSelectClipRgn
SetBkColor
StretchBlt
TextOutW
SetStretchBltMode
GetDeviceCaps
CreateCompatibleBitmap
GetBitmapBits
Rectangle

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
SHBrowseForFolderW

ole32

OleLockRunning
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleUninitialize
OleInitialize

oleaut32

SysAllocString
OleLoadPicture
SysFreeString

wininet

InternetReadFile
InternetOpenUrlW
HttpQueryInfoW
InternetOpenW
InternetSetOptionW
InternetCloseHandle

riched20

ord4

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

Sections

.text
Size: 468KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5855842c34820bfbff3b6bb558e67025

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wininet

riched20

comctl32

msimg32

Sections

.text Size: 468KB - Virtual size: 466KB

.rdata Size: 92KB - Virtual size: 88KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 64KB - Virtual size: 60KB

.text
Size: 468KB - Virtual size: 466KB

.rdata
Size: 92KB - Virtual size: 88KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 64KB - Virtual size: 60KB