28437d59fdcc5622cb0bc08fc75a6e86_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

28437d59fdcc5622cb0bc08fc75a6e86_JaffaCakes118
Size

218KB
MD5

28437d59fdcc5622cb0bc08fc75a6e86
SHA1

c1f9c6b52bc537fe991adf0cc79d27c110da9d15
SHA256

87eed87a851c1033e9e3b37a272ec52cbef1297f13d074ef25525fde4b3b0c63
SHA512

66e98f13b3727351e900c779fb5a55d1b34f1727eed747fcb479d647fffefb7f51884043c37dfa59096641b5d4cee67c528e667856af11a0de25095c6f5752be
SSDEEP

6144:+T6DR9K6vgXxo6nJZZlqyLAMlXMYxijDK2Ewp677Cxv3uw0xRREw5aLbyBfX+AET:ZKXyYJZZlqyLAMlXMYxijDK2Ewp677Cr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28437d59fdcc5622cb0bc08fc75a6e86_JaffaCakes118

Files

28437d59fdcc5622cb0bc08fc75a6e86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0bc5181a1fe5816cb1665ef913e465f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

sdl

SDL_CloseAudio
SDL_CreateRGBSurfaceFrom
SDL_Delay
SDL_EnableKeyRepeat
SDL_EnableUNICODE
SDL_Flip
SDL_GetError
SDL_GetModState
SDL_GetRelativeMouseState
SDL_GetTicks
SDL_GetVideoInfo
SDL_Init
SDL_InitSubSystem
SDL_JoystickEventState
SDL_JoystickNumAxes
SDL_JoystickNumBalls
SDL_JoystickNumButtons
SDL_JoystickNumHats
SDL_JoystickOpen
SDL_JoystickUpdate
SDL_LockAudio
SDL_LockSurface
SDL_MapRGB
SDL_NumJoysticks
SDL_OpenAudio
SDL_PauseAudio
SDL_PollEvent
SDL_Quit
SDL_RWFromFile
SDL_SaveBMP_RW
SDL_SetColors
SDL_SetModuleHandle
SDL_SetVideoMode
SDL_ShowCursor
SDL_UnlockAudio
SDL_UnlockSurface
SDL_UpdateRect
SDL_VideoModeOK
SDL_WM_GrabInput
SDL_WM_SetCaption
SDL_WM_SetIcon
SDL_WaitEvent
SDL_WarpMouse
SDL_WasInit
SDL_getenv
SDL_strlcat
SDL_strlcpy

kernel32

AddAtomA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindAtomA
FreeLibrary
GetAtomNameA
GetCommandLineA
GetFileAttributesA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
WideCharToMultiByte

msvcrt

_chdir
_stat
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_filbuf
_findclose
_findfirst
_findnext
_fullpath
_iob
_isctype
_onexit
_pctype
_setmode
_stricmp
abort
atexit
atoi
atol
exit
fclose
fflush
fgetc
fgets
fopen
fputc
free
freopen
fseek
getenv
localeconv
malloc
memcpy
memset
perror
remove
setbuf
setvbuf
signal
strchr
strcmp
strcpy
strlen
strncpy
strrchr
strstr
time
tolower
toupper
wcslen

cclib

cc_get_game_location
cc_get_game_size
cc_init
cc_is_init
cc_shutdown

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c0bc5181a1fe5816cb1665ef913e465f

Headers

File Characteristics

Imports

sdl

kernel32

msvcrt

cclib

Sections

.text Size: 71KB - Virtual size: 70KB

.data Size: 59KB - Virtual size: 59KB

.rdata Size: 7KB - Virtual size: 6KB

.code Size: 75KB - Virtual size: 75KB

.bss Size: - Virtual size: 1.1MB

.idata Size: 4KB - Virtual size: 3KB

.text
Size: 71KB - Virtual size: 70KB

.data
Size: 59KB - Virtual size: 59KB

.rdata
Size: 7KB - Virtual size: 6KB

.code
Size: 75KB - Virtual size: 75KB

.bss
Size: - Virtual size: 1.1MB

.idata
Size: 4KB - Virtual size: 3KB