9f454874d4b1d8a97197be2d18d12fed_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9f454874d4b1d8a97197be2d18d12fed_JaffaCakes118
Size

4.2MB
MD5

9f454874d4b1d8a97197be2d18d12fed
SHA1

13cba0fa1f0fdb08f4460ff436b58ec5de92ab86
SHA256

a94568318cbc223a984f0d00d516e79d826ada7912930739b37d3cf469e737a6
SHA512

b653516df53a4ce6d7fc1599234d163618d18850aa424a6ad30f13a08b56d90deb78a8f511cc2221f516ff9cd88567b569a9c73edd3cb72633d728eb0f3832d9
SSDEEP

98304:UN9f20RyEQwg9Wdw63amAA5lCWfzfEQrxve/hRLgUcFUL:Un3QEQF9Wdw63O8/wjLgq

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PAYDAY.2.Beta.Update.4.and.Crack/PAYDAY.2.Beta.Update.4.and.Crack/Crack/steam_api.dll
unpack001/PAYDAY.2.Beta.Update.4.and.Crack/PAYDAY.2.Beta.Update.4.and.Crack/Update/PAYDAY_2_Beta_Update_4.exe

Files

9f454874d4b1d8a97197be2d18d12fed_JaffaCakes118
.zip
PAYDAY.2.Beta.Update.4.and.Crack/PAYDAY.2.Beta.Update.4.and.Crack/Crack/3DMGAME.ini
PAYDAY.2.Beta.Update.4.and.Crack/PAYDAY.2.Beta.Update.4.and.Crack/Crack/steam_api.dll
.dll windows:5 windows x86 arch:x86

87bad2c4e15722db3142a944cd026be6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

MessageBoxA

shell32

SHGetSpecialFolderPathA

Exports

Exports

GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_Init
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_RestartApp
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamApps
SteamClient
SteamContentServer
SteamContentServerUtils
SteamContentServer_Init
SteamContentServer_RunCallbacks
SteamContentServer_Shutdown
SteamFriends
SteamGameServer
SteamGameServerNetworking
SteamGameServerStats
SteamGameServerUtils
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_Init
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamHTTP
SteamMasterServerUpdater
SteamMatchmaking
SteamMatchmakingServers
SteamNetworking
SteamRemoteStorage
SteamScreenshots
SteamUser
SteamUserStats
SteamUtils
Steam_GetHSteamUserCurrent
Steam_RegisterInterfaceFuncs
Steam_RunCallbacks
g_pSteamClientGameServer

Sections

.text
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3DMGAME
Size: - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3DMGAME
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAYDAY.2.Beta.Update.4.and.Crack/PAYDAY.2.Beta.Update.4.and.Crack/PC6��Ϸ��.url
.url
PAYDAY.2.Beta.Update.4.and.Crack/PAYDAY.2.Beta.Update.4.and.Crack/Update/PAYDAY_2_Beta_Update_4.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAYDAY.2.Beta.Update.4.and.Crack/PAYDAY.2.Beta.Update.4.and.Crack/changelog.txt
PAYDAY.2.Beta.Update.4.and.Crack/PAYDAY.2.Beta.Update.4.and.Crack/��Ϸ�޸��˵��.txt

Sharing

General

Malware Config

Signatures

Files

87bad2c4e15722db3142a944cd026be6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Exports

Exports

Sections

.text Size: - Virtual size: 92KB

.rdata Size: - Virtual size: 29KB

.data Size: - Virtual size: 16KB

.3DMGAME Size: - Virtual size: 115KB

.3DMGAME Size: 224KB - Virtual size: 223KB

.reloc Size: 512B - Virtual size: 140B

.rsrc Size: 512B - Virtual size: 434B

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 39KB - Virtual size: 39KB

DATA Size: 1024B - Virtual size: 592B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 143KB - Virtual size: 143KB

.text
Size: - Virtual size: 92KB

.rdata
Size: - Virtual size: 29KB

.data
Size: - Virtual size: 16KB

.3DMGAME
Size: - Virtual size: 115KB

.3DMGAME
Size: 224KB - Virtual size: 223KB

.reloc
Size: 512B - Virtual size: 140B

.rsrc
Size: 512B - Virtual size: 434B

CODE
Size: 39KB - Virtual size: 39KB

DATA
Size: 1024B - Virtual size: 592B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 143KB - Virtual size: 143KB