9fb5ffb829844f9781c072738cb36602_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9fb5ffb829844f9781c072738cb36602_JaffaCakes118
Size

2.1MB
MD5

9fb5ffb829844f9781c072738cb36602
SHA1

877897f7c72cb0a8d22e4483b53d6ecda0cc3528
SHA256

1c63b07a86a0f8dfa76fc5285ef90f4728d24b51e51ca2d78963ec747de5b5d7
SHA512

acfa05ad44e240b5c44cd359f35e1ab89446fe30d34eeea57ddc182e7c37e0fe2f8338a9518b259b30c5a726db11fdf760f06c40e8fdaadce8a54cddaf501ab8
SSDEEP

49152:ev6HDuEOxciecaOr0qVQcjeK/H5ZM91tL6DU467UJKQA:ev0qEOxecaOr0qVQ6HzMrtEwaKQA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Game.exe

Files

9fb5ffb829844f9781c072738cb36602_JaffaCakes118
.zip
Game.exe
.exe windows:6 windows x86 arch:x86

63455289dbf91c1e770d5d838b88dad0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Archivos de Source\Source PTL OFICIAL\SrcGame\src\Release\Game.pdb

Imports

dsound

ord1

kernel32

CreateDirectoryA
WriteFile
OutputDebugStringA
GetCurrentDirectoryA
CreateProcessA
WritePrivateProfileStringA
SetFilePointer
VirtualProtect
VirtualQuery
GlobalAlloc
GetTickCount64
GetComputerNameA
SuspendThread
ResumeThread
CopyFileA
WaitForSingleObject
SetThreadPriority
TerminateThread
GetExitCodeThread
_lopen
_lcreat
_lread
_lwrite
_lclose
CompareFileTime
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
IsDBCSLeadByte
LocalAlloc
LocalFree
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
TerminateProcess
GetVersionExA
SetEndOfFile
HeapSize
CreateFileW
SetStdHandle
OutputDebugStringW
SetConsoleCtrlHandler
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
CreateThread
FindFirstFileExW
GetTimeZoneInformation
GetPrivateProfileIntA
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryExW
FreeLibrary
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
RaiseException
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
SetLastError
DecodePointer
EncodePointer
FormatMessageW
GetLastError
InitializeSListHead
GetSystemTimeAsFileTime
FindNextFileA
FindClose
ExitProcess
GetFileSize
ReadFile
FindFirstFileA
lstrcmpiA
lstrcmpA
lstrcatA
ExitThread
GetCurrentThread
Sleep
Module32Next
Module32First
Thread32Next
Thread32First
GetCurrentProcessId
GetCurrentProcess
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteConsoleW
QueryPerformanceCounter
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
CreateToolhelp32Snapshot
lstrlenA
lstrcpyA
lstrcpynA
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
FreeLibraryAndExitThread
GetTickCount
OpenThread
GetPrivateProfileStringA
HeapReAlloc
InitializeCriticalSection
DuplicateHandle
CloseHandle
IsDebuggerPresent
GetLocalTime
DeleteFileA
CreateFileA
GetCurrentThreadId
FindNextFileW

user32

SetMenu
LoadMenuA
CheckMenuItem
EnableMenuItem
SetForegroundWindow
CreateMenu
GetMenu
LoadIconA
DestroyIcon
SetWindowPos
GetAsyncKeyState
AdjustWindowRect
SetWindowLongA
CharToOemA
OemToCharA
CharUpperA
GetWindowTextA
FindWindowA
GetSystemMetrics
wsprintfA
CharLowerA
EnumWindows
GetClassNameA
GetDC
ReleaseDC
SetWindowTextA
GetClientRect
ClientToScreen
OffsetRect
SendMessageA
GetKeyState
MessageBoxA
LoadKeyboardLayoutA
GetKeyboardLayoutNameA
TranslateMessage
DispatchMessageA
PeekMessageA
DefWindowProcA
PostQuitMessage
PostMessageA
CallWindowProcA
SetFocus
GetForegroundWindow
AdjustWindowRectEx
ShowCursor
GetWindowLongA
SetTimer
GetWindow
RegisterClassA
CreateWindowExA
DestroyWindow
ShowWindow
CreateDialogParamA
GetDlgItem
WaitMessage
UpdateWindow
LoadCursorA

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
DeleteDC
DeleteObject
GetDIBits
SelectObject
GetObjectA
SetBkMode
GetStockObject
SetTextColor
GetTextColor
CreateSolidBrush
CreateFontA
BitBlt

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyA

shell32

Shell_NotifyIconA
ShellExecuteA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

d3d9

Direct3DCreate9

d3dx9_43

D3DXCreateFontA
D3DXCreateTextureFromFileInMemoryEx
D3DXGetImageInfoFromFileInMemory

winmm

mmioClose
timeBeginPeriod
mmioWrite
mmioGetInfo
mmioSetInfo
mmioOpenA
timeEndPeriod
timeKillEvent
mixerGetControlDetailsA
timeSetEvent
timeGetTime
mmioRead
mmioAdvance
mmioDescend
mmioAscend
mmioCreateChunk
mixerGetDevCapsA
mixerOpen
mixerClose
mixerGetLineInfoA
mixerGetLineControlsA
mixerSetControlDetails
mmioSeek

shlwapi

PathFileExistsA

msvfw32

ICDecompress
ICSendMessage
ICClose
ICLocate

avifil32

AVIStreamInfoA
AVIStreamOpenFromFileA
AVIStreamRelease
AVIStreamRead
AVIFileExit
AVIStreamLength
AVIStreamReadFormat
AVIFileInit

wininet

InternetOpenUrlA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenA

iphlpapi

GetAdaptersInfo

wsock32

closesocket
ioctlsocket
WSACleanup
accept
bind
connect
inet_ntoa
htons
inet_addr
select
__WSAFDIsSet
WSAAsyncSelect
WSAGetLastError
WSAStartup
gethostname
gethostbyname
socket
setsockopt
send
recv
listen

imm32

ImmSetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListA
ImmGetDescriptionA
ImmGetCompositionStringA
ImmReleaseContext
ImmGetContext
ImmGetProperty
ImmGetCandidateListCountA

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 97.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63455289dbf91c1e770d5d838b88dad0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

dsound

kernel32

user32

gdi32

advapi32

shell32

ole32

d3d9

d3dx9_43

winmm

shlwapi

msvfw32

avifil32

wininet

iphlpapi

wsock32

imm32

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.rdata Size: 524KB - Virtual size: 524KB

.data Size: 1.2MB - Virtual size: 97.9MB

_RDATA Size: 2KB - Virtual size: 1KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 524KB - Virtual size: 524KB

.data
Size: 1.2MB - Virtual size: 97.9MB

_RDATA
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB