45b3243b92be27488bdb3bc7c152f475_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

45b3243b92be27488bdb3bc7c152f475_JaffaCakes118
Size

770KB
MD5

45b3243b92be27488bdb3bc7c152f475
SHA1

c653efb86b0c30a2c4459703f181276fa316e1fb
SHA256

70f7d5b3f6d304d96804c600c58bc48bab9d80809931787c738f723adfeffbd0
SHA512

bcde95781cdf9a308bd785093920b1e4eabcfb42eddc1191475ae5c9a0483c402f86360a28ef9b456e3b719a43cfc5187154138baf2a00c67250fec6bed165a3
SSDEEP

12288:Nhk3jxuh+fhG4MuUqAk8hR5iXhZTVoX7koLndM3ig:NSxus5GE8nfeT2XoandMyg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45b3243b92be27488bdb3bc7c152f475_JaffaCakes118

Files

45b3243b92be27488bdb3bc7c152f475_JaffaCakes118
.dll windows:6 windows x64 arch:x64

97ae2cd32b169c7e1204bfaaf6d4977f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\miria\OneDrive\Desktop\periorfn\periorfnv5\PaulGamerTV_pasted_cheat-master\TrueAim\x64\Release\Release\TrueAim.pdb

Imports

kernel32

GlobalAlloc
GlobalLock
GlobalUnlock
QueryPerformanceFrequency
QueryPerformanceCounter
ExitProcess
GetTempPathA
GetCurrentProcess
K32GetModuleInformation
GetModuleHandleW
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
SetStdHandle
HeapQueryInformation
HeapReAlloc
HeapFree
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
WriteConsoleW
OutputDebugStringW
GetFileSizeEx
GetConsoleCP
WriteFile
FlushFileBuffers
ReadConsoleW
GetConsoleMode
GetFileType
GetStdHandle
GetCurrentThreadId
GetModuleHandleA
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
SetEndOfFile
SetFilePointerEx
GetLastError
SetLastError
EncodePointer
DecodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LCMapStringW
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
ReadFile
GetModuleFileNameW
GetModuleHandleExW
HeapAlloc
HeapSize
HeapValidate
GetSystemInfo

user32

GetClipboardData
SetClipboardData
EmptyClipboard
CallWindowProcW
SetWindowLongPtrW
MessageBoxW
GetAsyncKeyState
GetForegroundWindow
FindWindowW
mouse_event
GetKeyState
GetCapture
ClientToScreen
SetCapture
SetCursor
GetClientRect
ReleaseCapture
SetCursorPos
OpenClipboard
CloseClipboard

d3d11

D3D11CreateDeviceAndSwapChain

imm32

ImmSetCompositionWindow
ImmGetContext

Exports

Exports

?PresentHook@@YAJPEAUIDXGISwapChain@@II@Z
?ResizeHook@@YAJPEAUIDXGISwapChain@@IIIW4DXGI_FORMAT@@I@Z
?WndProcHook@@YA_JPEAUHWND__@@I_K_J@Z

Sections

.text
Size: 578KB - Virtual size: 578KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97ae2cd32b169c7e1204bfaaf6d4977f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

d3d11

imm32

Exports

Exports

Sections

.text Size: 578KB - Virtual size: 578KB

.rdata Size: 156KB - Virtual size: 155KB

.data Size: 6KB - Virtual size: 29KB

.pdata Size: 25KB - Virtual size: 24KB

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 578KB - Virtual size: 578KB

.rdata
Size: 156KB - Virtual size: 155KB

.data
Size: 6KB - Virtual size: 29KB

.pdata
Size: 25KB - Virtual size: 24KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 3KB - Virtual size: 2KB