88dda253cd16dd530bd0642d71ab6066_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

88dda253cd16dd530bd0642d71ab6066_JaffaCakes118
Size

53KB
MD5

88dda253cd16dd530bd0642d71ab6066
SHA1

8ecbb9a9fe6f140373cacb68e7880e24592cb4bf
SHA256

f53f484e96752a81c401b0c4f07128316c74dee0f176a15fb277edb1c210a8cd
SHA512

2fdaca50d7258dc1e2cb2b4cf8ca75b3e9d2258b6b72e8c7736a694afd1bfc72d2f7c5365ffad0049e4f050a253515e1e0dd365640ee19a23c4d542429793051
SSDEEP

1536:Q/p8cjKlOYVMMBcp4fgyto0lJFVztyKWuk0+BaKKEKtg+NCrLAGXjx12h5wsvm:s6OeBcUHbkTQ5NCrLAGXj25hm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88dda253cd16dd530bd0642d71ab6066_JaffaCakes118

Files

88dda253cd16dd530bd0642d71ab6066_JaffaCakes118
.dll windows:6 windows x86 arch:x86

a9f4dbf602242435676456e905c7ac9b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\HKunion\ProJectWarz + Fix + โปรแกรม\ProJectWarz Free\Release\NINO CHEAT..pdb

Imports

kernel32

DisableThreadLibraryCalls
CloseHandle
CreateThread
IsBadReadPtr
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
Sleep
GetModuleHandleA
GetCurrentProcess
VirtualProtect
InitializeSListHead
GetModuleFileNameA
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection

user32

keybd_event
ScreenToClient
GetForegroundWindow
GetCursorPos
GetSystemMetrics
GetAsyncKeyState
mouse_event

msvcp140

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?pubsetbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A

d3dx9_43

D3DXCreateLine
D3DXMatrixRotationYawPitchRoll
D3DXMatrixMultiply
D3DXCreateFontA
D3DXCreateSprite
D3DXVec3Project

vcruntime140

memmove
memcpy
__CxxFrameHandler3
__std_exception_copy
memset
__std_type_info_destroy_list
_except_handler4_common
_CxxThrowException
__std_exception_destroy

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-stdio-l1-1-0

fputc
fflush
__stdio_common_vsprintf
fread
setvbuf
ungetc
fclose
fgetc
fwrite
fsetpos
_fseeki64
_get_stream_buffer_pointers
fgetpos

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table

api-ms-win-crt-time-l1-1-0

_localtime64
_time64

api-ms-win-crt-math-l1-1-0

_libm_sse2_sin_precise
_libm_sse2_cos_precise
_libm_sse2_sqrt_precise

Exports

Exports

_DllMain@12

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9f4dbf602242435676456e905c7ac9b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

d3dx9_43

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 3KB