D:\Priston\Projetos\C++\Source Fernando Matoso\Game\src\Release\game.pdb
Behavioral task
behavioral1
Sample
Game.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Game.exe
Resource
win10v2004-20240508-en
General
-
Target
98692ebc62691a97ba3bb275a4dfe01e_JaffaCakes118
-
Size
3.9MB
-
MD5
98692ebc62691a97ba3bb275a4dfe01e
-
SHA1
bc932e40e8a45465a69600d42187ceeb915a4796
-
SHA256
71c12591ab698f39c7dc1b3aa04ca61d575d9c055d8c5930cfe8157ac173b0c5
-
SHA512
cdbe5e1d292a0842d242008e984b044c1ac113042fe8c4444aeb44aa9621a6cac8fcdc73abca9bce5948a3f345e2ac4581aa253e17ae9affc1de739e95759fa4
-
SSDEEP
98304:opE4ovsYjMkVfiYnCYun37chyPx9IKeZsf0g1ZIqGdW:opE5kjwnm3ZxFea1ZIk
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Game.exe vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Game.exe
Files
-
98692ebc62691a97ba3bb275a4dfe01e_JaffaCakes118.zip
-
Game.exe.exe windows:6 windows x86 arch:x86
118fb529fb7abbf9ad8273223dc700a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
dsound
ord1
kernel32
GetVersionExA
EnumResourceTypesW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
LoadIconA
gdi32
CreateFontA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CoUninitialize
d3d9
Direct3DCreate9
d3dx9_43
D3DXGetImageInfoFromFileInMemory
winmm
mmioSeek
shlwapi
PathFileExistsA
msvfw32
ICDecompress
avifil32
AVIFileInit
iphlpapi
GetAdaptersInfo
wininet
InternetOpenUrlA
wsock32
socket
imm32
ImmGetCompositionStringA
Exports
Exports
���J?0�O$�͟��DR���s���(�FPcle= ������mS�I&U�"\�C��V+nS�x�Lc�)za?��XH�}|���*����Ir_I��`�e��E2�v����Ё71�Q'"Ӹ9��N,?aC�< ����x[�.)mVLn�.o<�1�Ei����w��SAdH�ް�*�S</���SҸ+�InLn�m�֟�N���F�U(I�=��o���,E�rh�F*����se�T|�do���B�Q|ڋwo�L�Z��w�(�Z��G�l����$_}�$w�6mj����B1���ڦJ�R�l����`c�+��mm�q�������Y3-�Nw�W���F�D^sݹE��{�g�ʔ[j`%/GkI)Oܔ��s����R��p-V������� S���j��j�rq���BB����"��]ċ��7cr�->�G�!��+�ҟl���y�N����iZE\v��?%h@]=mc�s!4����u����U�Y�45��n��|�-�JҲ�K�e������� ��ꘓ0,歰8g� �x~7� �^��R��dL��]�u~E=�K��i�r�b����e��MTOj��1��31X�5f�3<g�~ �C��K*fД���M�ȁx�6���m�3��s��:��(E��<�_g���@����?�T�Qbac��v���ӱ4�m@q1���M�����@�Mд%���ո�u����j& �rU�ZHV�%=2��[,�^���e�/���Ϲ��q�?M��\~r�|�3�)@S ��¸�Zd����#�\�A�K��-((>�L�dh&B���e�A�c'#+yz�r>�#����e�Yd�W�7�Qg�U ��_S�P�`�!�j�rb����5K���M��) ��y���O��gH� �H(���ˡ�`��؊��4H�ZTp]e�|¤L�K�Co�"�>$R>ȟe�� �'� NY��o�L�<X(cFiE0ͭ���@0b����#wX�� ����D[+=�L�j�,�T��g��X29�i p<<�� �F����85P��KR�p��i����T t�4�z��*Z`��/���Ѳ`ݵb�J�TLԏ1�A,�u<k�����t�b���l>5;�����d�R�P��:�i�� [>�k�0���1�R����xfu�_�#֒�<6���u��f�d�$z�ݽމj2P�:�hp�!��NnɇB`O�R��|���^0zhjD�+���7����}ѱ`?��*�GZ��cb8����z����*�&M�F��7�as�� �f�D�#��z S�$F��#4��1�~�~笺J~+}s_��o10騗�Y�`�a�I�8X�#h(n?�s!G�����l@�I�¢{YS;/����f���Nz���N���)4}��tr#�Û����^������ũL��#f�V:�i��E������l��[ᖜ]�{��y0χ����hp�����~���y{�\�:r>��kP�)����?��D�+�iu,��_���W ��tSw�/�77s��^C��/��\��w[\+M��1�>�,)����J�m�O;8���vn��8ȩ���q\4$��i�",Lҕ��E���0M^8.���d����]�H��%(����G��9�`4��.�5�߉(t���@y߰8�VԱto�\>�:� �;�l�WQ�a�,�No��B�]V"GF�^�v�Gzޫ��M�Z%p�"���<W&��.�,��U���D4+f�b�VS��a��½UUŖ0 �,�-ә��)�L�������DJ�z ����� �V�ʜY��灻L%�ٸ�����!�!��X���#� dY�Q���P$bb��Z�#�����+����f�s�#��h�dcd�n��y�*�lsu���#�#�C�����r�E��l�L{W�<�a��YאG�ԜFU�I���V�J^�zB�f��k��D����ƑW�*�v�^��1����4����t�??�nX��� ����4�*��i{�6D.�!f�H�*[�BdžQ��Y4*KŎ�7�6��k:s��ҙH8CJA��K�@���Pͽ(�z�Dj��B����.�]е�)��1�x���"����'��#��b���<U�� ��G2��mP ��B�Μ�z{K���,��+�^����5��:��sͣ�|l{0���"K(�X��*���(���Ѹ��=�E�ѩU�q�J�~S�ͷ��l�λ��GD��G�d�Z��K�O���(V���S��Ȑ��㨖����8�1��v� E��V��$�0 �����K���+[>��5ِ��1@��%�7�SjB��3�kk\��e�/~0O>O��I�)S���>��S��#���=�����ÑL�ysR�e��[�y#�3ŏ��3�>�PP6�ga'�p<j�MS ��{���p�����̷����H��ph}������|��/���g���3����`�D��:/�~�\E�˪���9�P���v��~��η��e��#kY>�������8�R���O���%��qh:Yzu�K�`�wt�rP<=u܍z/�1 RU����ÝS!��`���r=3���ǠS����P��z����eTY��gY�K�����AN���D����t����u�3� TM�����%+K�Q+�KE�5O�A�:���<�8�5@e�� ��{�$�Uc���'�vz��@���F{�9Xo�Y���*kA�C�u��Zt���)7�խ7�3�:�y�k��(-9Yv�[[���O���kV����&�)!�-�jXB�OU��o�Y^�a���ʗ̀������� =��e!|�)����`&��f���I.3`���.�ƞc`�p_���a9"'���w���'������s�%'���{�n��I&i\P":i��f���9�����L��� ���o�I9z���6��ў��ww�=���W{�݆Kp����H�Y��!�P��}sd�(�xz��^J��;��}m�R���!C�rr5��T��r#|�P�|=]���~��)L��CΕ���$3`���յ�b�~#���g��BN.�Mg%~4�xh��i7ň"ı �
Sections
.text Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 457KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 93.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ