CreateObject
GetHandlerProperty
Behavioral task
behavioral1
Sample
Nestopia/Nestopia/7zxa.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Nestopia/Nestopia/7zxa.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
Nestopia/Nestopia/kailleraclient.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Nestopia/Nestopia/kailleraclient.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
Nestopia/Nestopia/language/english.dll
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
Nestopia/Nestopia/language/english.dll
Resource
win10v2004-20240426-en
Target
5c91d1540aff7edaa8fb0c06096456d9_JaffaCakes118
Size
303KB
MD5
5c91d1540aff7edaa8fb0c06096456d9
SHA1
229f460637d47fc3a09fcbefb07a5d3916fe885a
SHA256
0c4d4118921b4a0bf76bcd1f0ddac4c00cf48be4546de0feeee73629ed69841b
SHA512
e99f0645a00def7f82c93068b5dd827ba9bfe700532d159c144a98f5805cf2bb94b48a00667766371daa502f0abbb8f5c72c64c4d3bef9b14be17ed38322213b
SSDEEP
6144:hY1ZN6sfi5Me+vRuvIMFIWqGW555uMtSTSJHfm0Nu4588AZ5QF3IQaDfZtcTWeMj:hY1Z25+Z0IdGmrtSTSxT88AZKBaDRtc+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/Nestopia/Nestopia/kailleraclient.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/Nestopia/Nestopia/kailleraclient.dll | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/Nestopia/Nestopia/7zxa.dll |
unpack001/Nestopia/Nestopia/kailleraclient.dll |
unpack002/out.upx |
unpack001/Nestopia/Nestopia/language/english.nlg |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CharUpperW
CharUpperA
SysFreeString
SysAllocStringByteLen
VariantClear
SysAllocString
GetStringTypeW
GetStringTypeA
LCMapStringW
VirtualAlloc
VirtualFree
GetProcAddress
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
CloseHandle
WriteFile
CreateEventA
LeaveCriticalSection
EnterCriticalSection
ResetEvent
SetEvent
WaitForSingleObject
WaitForMultipleObjects
CreateThread
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
GetSystemInfo
HeapAlloc
HeapFree
RaiseException
RtlUnwind
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
ExitProcess
SetUnhandledExceptionFilter
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
LCMapStringA
CreateObject
GetHandlerProperty
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_kailleraChatSend@4
_kailleraEndGame@0
_kailleraGetVersion@4
_kailleraInit@0
_kailleraModifyPlayValues@8
_kailleraSelectServerDialog@4
_kailleraSetInfos@4
_kailleraShutdown@0
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE