Static task
static1
Behavioral task
behavioral1
Sample
jam2game.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
jam2game.exe
Resource
win10v2004-20231023-en
General
-
Target
jam2game.exe
-
Size
1.2MB
-
MD5
7c6e2bfc27c4787ba3f6dc23d48893e4
-
SHA1
a6f32ea87ebefb9e2ef3ce9072bb13a4fd6ede10
-
SHA256
944051779c7a0a8ab24ed2fa2366bfb8424f7855986372043466884850ccd741
-
SHA512
1468058122a49e55761f6d4d3ba14fed45a7073c9adf567ffb6f39f6ecf478eb5d138bc44892206acbf7d41a6d3381a29c329ee8b90389538502f940fbdf4676
-
SSDEEP
12288:WVWcmfy3KsWIhrDYNa4skcemMvkhVlUk55JMZa4GsD2B2/b9DnTvZJWHONoRLnor:Wt37WIdWdvSVGUoDnNJW4oRabiC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource jam2game.exe
Files
-
jam2game.exe.exe windows:4 windows x86
2b6ab93090cd9d6af5a7109fedbf7898
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord823
ord825
msvcrt
_purecall
_ftol
memmove
fopen
fclose
fprintf
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABQBD@Z
ldexp
frexp
_copysign
exit
_vsnprintf
_snprintf
abort
vsprintf
malloc
realloc
free
??1type_info@@UAE@XZ
__dllonexit
tmpfile
fwrite
fseek
toupper
strncmp
_stricmp
_CIcosh
_CIexp
_CIfmod
_CIsinh
_CItanh
_isnan
_fpclass
atoi
isxdigit
isalpha
isalnum
_controlfp
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
tolower
atof
_CIasin
_iob
rand
_mbsstr
time
localtime
ceil
_mbsnbcpy
_mbsnbcat
strncpy
strcspn
strtod
_isctype
fread
strcoll
_setjmp3
longjmp
fgetc
ungetc
freopen
_EH_prolog
_finite
_CIacos
__CxxFrameHandler
sprintf
floor
_CIpow
isspace
isdigit
qsort
setlocale
_strdup
_itoa
kernel32
LoadLibraryA
CloseHandle
GetLastError
CreateFileA
MapViewOfFile
GetFileSize
HeapFree
CreateFileMappingA
CreateFileW
GetVersionExA
UnmapViewOfFile
lstrcmpiA
OutputDebugStringA
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleA
GetStartupInfoA
GetFullPathNameA
HeapAlloc
GetProcessHeap
lstrlenA
IsProcessorFeaturePresent
GetProcAddress
lstrcatA
lstrcmpA
WideCharToMultiByte
MulDiv
lstrcpynA
Sleep
lstrcpyA
GetSystemInfo
user32
PeekMessageA
GetClientRect
GetWindowRect
GetWindowLongA
MessageBoxA
GetAsyncKeyState
CreateWindowExA
LoadMenuA
AdjustWindowRect
wsprintfA
IsDlgButtonChecked
EnableWindow
CheckRadioButton
EndDialog
DialogBoxParamA
PostMessageA
GetDlgItem
GetIconInfo
GetDC
ReleaseDC
LoadAcceleratorsA
SetRect
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
DestroyAcceleratorTable
SetWindowLongA
SetMenu
SetWindowPos
GetClassLongA
GetMenu
DestroyMenu
DestroyWindow
PostQuitMessage
ClipCursor
DefWindowProcA
SetCursor
SendMessageA
GetCursorPos
ScreenToClient
LoadIconA
LoadCursorA
RegisterClassA
msvcp60
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?_Doraise@runtime_error@std@@MBEXXZ
?what@runtime_error@std@@UBEPBDXZ
??0runtime_error@std@@QAE@ABV01@@Z
??1runtime_error@std@@UAE@XZ
??_7runtime_error@std@@6B@
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??1ios_base@std@@UAE@XZ
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
??0locale@std@@QAE@XZ
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Global@_Locimp@locale@std@@0PAV123@A
?_Incref@facet@locale@std@@QAEXXZ
??_7?$basic_filebuf@DU?$char_traits@D@std@@@std@@6B@
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
?__Fiopen@std@@YAPAU_iobuf@@PBDH@Z
?_Initcvt@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?clear@ios_base@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xlen@std@@YAXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1locale@std@@QAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
gdi32
GetTextExtentPoint32A
SetTextAlign
SetBkColor
SetTextColor
SelectObject
ExtTextOutA
GetDeviceCaps
SetMapMode
CreateDIBSection
CreateCompatibleDC
GetDIBits
GetObjectA
DeleteObject
DeleteDC
CreateFontA
GetStockObject
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyA
d3d9
Direct3DCreate9
winmm
timeGetTime
opcode
??0OPCODECREATE@Opcode@@QAE@XZ
??0RayCollider@Opcode@@QAE@XZ
??0OBBCollider@Opcode@@QAE@XZ
??0SphereCollider@Opcode@@QAE@XZ
??0PlanesCollider@Opcode@@QAE@XZ
??0OPCODE_Model@Opcode@@QAE@XZ
??0CollisionFaces@Opcode@@QAE@XZ
??1CollisionFaces@Opcode@@QAE@XZ
??1Matrix4x4@IceMaths@@QAE@XZ
??1Ray@IceMaths@@QAE@XZ
?Collide@RayCollider@Opcode@@QAE_NABVRay@IceMaths@@PAVOPCODE_Model@2@PBVMatrix4x4@4@PAI@Z
??1OBBCache@Opcode@@QAE@XZ
??1OBB@Meshmerizer@@QAE@XZ
??1Container@IceCore@@QAE@XZ
?Collide@OBBCollider@Opcode@@QAE_NAAUOBBCache@2@ABVOBB@Meshmerizer@@PAVOPCODE_Model@2@PBVMatrix4x4@IceMaths@@3@Z
??0Container@IceCore@@QAE@XZ
??1SphereCache@Opcode@@QAE@XZ
??1Sphere@Meshmerizer@@QAE@XZ
?Collide@SphereCollider@Opcode@@QAE_NAAUSphereCache@2@ABVSphere@Meshmerizer@@PAVOPCODE_Model@2@PBVMatrix4x4@IceMaths@@3@Z
??1Plane@IceMaths@@QAE@XZ
??1PlanesCache@Opcode@@QAE@XZ
?Collide@PlanesCollider@Opcode@@QAE_NAAUPlanesCache@2@PBVPlane@IceMaths@@IPAVOPCODE_Model@2@PBVMatrix4x4@5@@Z
?Build@OPCODE_Model@Opcode@@QAE_NABUOPCODECREATE@2@@Z
??1RayCollider@Opcode@@UAE@XZ
??1OBBCollider@Opcode@@UAE@XZ
??1SphereCollider@Opcode@@UAE@XZ
??1PlanesCollider@Opcode@@UAE@XZ
??1OPCODE_Model@Opcode@@QAE@XZ
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ