5e1380b54867284f44094b39d84cc7cb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5e1380b54867284f44094b39d84cc7cb_JaffaCakes118
Size

152KB
MD5

5e1380b54867284f44094b39d84cc7cb
SHA1

936608775f2228ac175a0590faecd52f6597dd7f
SHA256

2964819e9cd838a3e7b08db8530524e344ac23ce44aa598f03f1fbf9c7953cea
SHA512

3e55226f1a8a7dde61ceb63cc46925458143555dec0eb5f39b75d90e5859595bc79ed2e3e319111252659d0fc08e022d8b5b2240b6dcc8d90bafa1ce49c7bdd2
SSDEEP

3072:OWIufWS42yGmGbnV9lYPHT6HyJKBPna3NwxEMaEEEEzdEEEEEEEEEEEEEEEEEEEV:ODV560WFnewD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e1380b54867284f44094b39d84cc7cb_JaffaCakes118

Files

5e1380b54867284f44094b39d84cc7cb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6315d28b2c09acec200c5f297f35555a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

core

?LanguageChange@UObject@@UAEXXZ
?ClearL2Game@UObject@@UAEXXZ
??1FArray@@QAE@XZ
?Register@UObject@@UAEXXZ
??0FName@@QAE@PBGW4EFindName@@@Z
?IsPendingKill@UObject@@UAEHXZ
?ScriptConsoleExec@UObject@@UAEHPBGAAVFOutputDevice@@PAV1@@Z
?CallFunction@UObject@@UAEXAAUFFrame@@QAXPAVUFunction@@@Z
?Empty@FArray@@QAEXHH@Z
?InitExecution@UObject@@UAEXXZ
?Add@FArray@@QAEHHH@Z
?GotoLabel@UObject@@UAEHVFName@@@Z
?GotoState@UObject@@UAE?AW4EGotoState@@VFName@@@Z
?GMalloc@@3PAVFMalloc@@A
?PostLoad@UObject@@UAEXXZ
?Modify@UObject@@UAEXXZ
?ProcessRemoteFunction@UObject@@UAEHPAVUFunction@@PAXPAUFFrame@@@Z
?Remove@FArray@@QAEXHHH@Z
?ProcessState@UObject@@UAEXM@Z
?ProcessDelegate@UObject@@UAEXVFName@@PAUFScriptDelegate@@PAX2@Z
?ProcessEvent@UObject@@UAEXPAVUFunction@@PAX1@Z
?Release@UObject@@UAGKXZ
?AddRef@UObject@@UAGKXZ
?QueryInterface@UObject@@UAGKABVFGuid@@PAPAX@Z
?appFailAssert@@YAXPBD0H@Z
??1FString@@QAE@XZ
?GError@@3PAVFOutputDeviceError@@A
??4FString@@QAEAAV0@ABV0@@Z
?IsLoaded@UObject@@UAEHXZ
?Rename@UObject@@UAEXPBGPAV1@@Z
?Tick@USubsystem@@UAEXM@Z
??0FString@@QAE@ABV0@@Z
?ConditionalDestroy@UObject@@QAEHXZ
?NetDirty@UObject@@UAEXPAVUProperty@@@Z
??0FArray@@IAE@HH@Z
?StaticAllocateObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@11@Z
?OnEvent@UObject@@UAEXABVFString@@0@Z
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
?GObjObjects@UObject@@1V?$TArray@PAVUObject@@@@A
?StaticLoadObject@UObject@@SAPAV1@PAVUClass@@PAV1@PBG2KPAVUPackageMap@@@Z
??3UIntProperty@@SAXPAXPAVUObject@@PBGK@Z
?StaticFindObject@UObject@@SAPAV1@PAVUClass@@PAV1@PBGH@Z
??3UIntProperty@@SAXPAX@Z
?appFromAnsi@@YAPBGPBDPAG@Z
??KFVector@@QBE?AV0@M@Z
??2UIntProperty@@SAPAXIPAVUObject@@PBGK@Z
?GIsNative@@3HA
?PostEditChange@UObject@@UAEXXZ
??1UClass@@UAE@XZ
??9FString@@QBEHPBG@Z
??0UClass@@QAE@W4ENativeConstructor@@KKPAV0@1VFGuid@@PBG33KP6AXPAX@ZP8UObject@@AEXXZ@Z
?ShutdownAfterError@UObject@@UAEXXZ
?IsA@UObject@@QBEHPAVUClass@@@Z
?appFreeDllHandle@@YAXPAX@Z
?GLanguageType@@3HA
?GetID@UProperty@@UBEEXZ
?GFileStream@@3PAVFFileStream@@A
?DestroyStream@FFileStream@@QAEXHH@Z
?Serialize@UObject@@UAEXAAVFArchive@@@Z
?Port@UProperty@@UBEHXZ
??0UFloatProperty@@QAE@W4ECppProperty@@HPBGK@Z
?QueryStream@FFileStream@@QAEHHAAH@Z
?Destroy@UObject@@UAEXXZ
?CopySingleValue@UBoolProperty@@UBEXPAX0PAVUObject@@@Z
?GAudioMaxRadiusMultiplier@@3MA
?DestroyValue@UProperty@@UBEXPAX@Z
??HFString@@QAE?AV0@ABV0@@Z
?RequestChunks@FFileStream@@QAEXHHPAX@Z
?GetPropertiesSize@UField@@UAEHXZ
?GAudioDefaultRadius@@3MA
?ImportText@UBoolProperty@@UBEPBGPBGPAEHH@Z
?CopyCompleteValue@UProperty@@UBEXPAX0PAVUObject@@@Z
?appGetDllHandle@@YAPAXPBG@Z
?appSqrt@@YANN@Z
??1UFloatProperty@@UAE@XZ
?CreateStream@FFileStream@@QAEHPBGHHPAXW4EFileStreamType@@1@Z
?GetOwnerClass@UField@@UAEPAVUClass@@XZ
?ExportTextItem@UBoolProperty@@UBEXPAGPAE1H@Z
?appRand@@YAHXZ
?GConfig@@3PAVFConfigCache@@A
??0FVector@@QAE@XZ
?Bind@UField@@UAEXXZ
?CopyCompleteValue@UFloatProperty@@UBEXPAX0PAVUObject@@@Z
?ExportCppItem@UBoolProperty@@UBEXAAVFOutputDevice@@H@Z
?appStrcmp@@YAHPBG0@Z
?ExportText@UProperty@@UBEHHPAGPAE1H@Z
??3UFloatProperty@@SAXPAXPAVUObject@@PBGK@Z
?MergeBools@UField@@UAEHXZ
?CopySingleValue@UFloatProperty@@UBEXPAX0PAVUObject@@@Z
?NetSerializeItem@UBoolProperty@@UBEHAAVFArchive@@PAVUPackageMap@@PAX@Z
?appGetDllExport@@YAPAXPAXPBG@Z
??3UFloatProperty@@SAXPAX@Z
?AddCppProperty@UField@@UAEXPAVUProperty@@@Z
?ImportText@UFloatProperty@@UBEPBGPBGPAEHH@Z
?SerializeItem@UBoolProperty@@UBEXAAVFArchive@@PAXH@Z
?ExportCpp@UProperty@@UBEXAAVFOutputDevice@@HHHH@Z
??DFString@@QBEPBGXZ
?Register@UField@@UAEXXZ
?ExportTextItem@UFloatProperty@@UBEXPAGPAE1H@Z
?Identical@UBoolProperty@@UBEHPBX0@Z
?Empty@FString@@QAEXXZ
?Printf@FString@@SA?AV1@PBGZZ
?appUnwindf@@YAXPBGZZ
??2UFloatProperty@@SAPAXIPAVUObject@@PBGK@Z
?PostLoad@UField@@UAEXXZ
?ExportCppItem@UFloatProperty@@UBEXAAVFOutputDevice@@H@Z
?Link@UBoolProperty@@UAEXAAVFArchive@@PAVUProperty@@@Z
?CleanupDestroyed@UProperty@@UBEXPAE@Z
?appAtof@@YAMPBG@Z
?appStrcpy@@YAPAGPAGPBG@Z
?appStrfind@@YAPBGPBG0@Z
?NetSerializeItem@UFloatProperty@@UBEHAAVFArchive@@PAVUPackageMap@@PAX@Z
?Serialize@UBoolProperty@@UAEXAAVFArchive@@@Z
?Serialize@UProperty@@UAEXAAVFArchive@@@Z
??4FString@@QAEAAV0@PBG@Z
?SerializeItem@UFloatProperty@@UBEXAAVFArchive@@PAXH@Z
?GL2ReplayMode@@3HA
?GCountryCode@@3PAGA
??0UBoolProperty@@QAE@W4ECppProperty@@HPBGK@Z
?Identical@UFloatProperty@@UBEHPBX0@Z
??0FString@@QAE@PBG@Z
?PrivateStaticClass@UObject@@0VUClass@@A
?appSecondsQPC@@YANXZ
?Link@UFloatProperty@@UAEXAAVFArchive@@PAVUProperty@@@Z
?GIsEditor@@3HA
?CopyCompleteValue@UIntProperty@@UBEXPAX0PAVUObject@@@Z
??1UBoolProperty@@UAE@XZ
??0FString@@QAE@XZ
?CopySingleValue@UIntProperty@@UBEXPAX0PAVUObject@@@Z
?ImportText@UIntProperty@@UBEPBGPBGPAEHH@Z
??3UBoolProperty@@SAXPAXPAVUObject@@PBGK@Z
?ExportTextItem@UIntProperty@@UBEXPAGPAE1H@Z
??3UBoolProperty@@SAXPAX@Z
?ExportCppItem@UIntProperty@@UBEXAAVFOutputDevice@@H@Z
?StaticConfigName@UObject@@SAPBGXZ
?Normalize@FVector@@QAEHXZ
?NetSerializeItem@UIntProperty@@UBEHAAVFArchive@@PAVUPackageMap@@PAX@Z
??2UBoolProperty@@SAPAXIPAVUObject@@PBGK@Z
?SerializeItem@UIntProperty@@UBEXAAVFArchive@@PAXH@Z
?Size@FVector@@QBEMXZ
?IsValid@UObject@@QAEHXZ
?Identical@UIntProperty@@UBEHPBX0@Z
?GetPathName@UObject@@QBEPBGPAV1@PAG@Z
?ParseCommand@@YAHPAPBGPBG@Z
?Link@UIntProperty@@UAEXAAVFArchive@@PAVUProperty@@@Z
?AddZeroed@FArray@@QAEHHH@Z
??0UIntProperty@@QAE@W4ECppProperty@@HPBGK@Z
?appMemset@@YAXPAXHH@Z
??1UIntProperty@@UAE@XZ

engine

?CleanUp@UAudioSubsystem@@UAEXXZ
??1UAudioSubsystem@@UAE@XZ
??4UAudioSubsystem@@QAEAAV0@ABV0@@Z
??0UAudioSubsystem@@QAE@ABV0@@Z
?PointRegion@UModel@@QBE?AUFPointRegion@@PAVAZoneInfo@@VFVector@@@Z
?GetDuration@USound@@UAEMXZ
??0USound@@QAE@PBGH@Z
?GStats@@3VFStats@@A
?PrivateStaticClass@USound@@0VUClass@@A
?PrivateStaticClass@ALineagePlayerController@@0VUClass@@A
?Audio@USound@@2PAVUAudioSubsystem@@A
??1USound@@UAE@XZ
?PostLoad@USound@@UAEXXZ
?PrivateStaticClass@UAmbientSoundObject@@0VUClass@@A
?Destroy@USound@@UAEXXZ
?Serialize@USound@@UAEXAAVFArchive@@@Z
??3USound@@SAXPAXPAVUObject@@PBGK@Z
?PS2Convert@USound@@UAEXXZ
??3USound@@SAXPAX@Z
?IsSoundNight@UL2NEnvManager@@QAEHXZ
?IsSoundDay@UL2NEnvManager@@QAEHXZ
??2USound@@SAPAXIPAVUObject@@PBGK@Z
?PrivateStaticClass@UAudioSubsystem@@0VUClass@@A
?AddMusicName@FL2ReplayManager@@QAEXVFString@@H@Z
?GetState@FL2ReplayManager@@QAEHXZ
??0UAudioSubsystem@@IAE@XZ
?ReadWaveInfo@FWaveModInfo@@QAEHAAV?$TArray@E@@@Z
?PrivateStaticClass@UMasterLevel@@0VUClass@@A
?RegisterStats@FStats@@QAEHW4EStatsType@@W4EStatsDataType@@VFString@@2W4EStatsUnit@@@Z
?L2GetPhysicsVolume@ALevelInfo@@QAEPAVAPhysicsVolume@@VFVector@@PAVAActor@@H@Z

vorbisfile

ov_info
ov_time_total
ov_pcm_total

kernel32

GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
VirtualAlloc
WriteFile
LoadLibraryA
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException

Exports

Exports

??0UALAudioSubsystem@@QAE@ABV0@@Z
??0UALAudioSubsystem@@QAE@XZ
??1UALAudioSubsystem@@UAE@XZ
??2UALAudioSubsystem@@SAPAXIPAVUObject@@PBGK@Z
??2UALAudioSubsystem@@SAPAXIPAW4EInternal@@@Z
??3UALAudioSubsystem@@SAXPAX@Z
??3UALAudioSubsystem@@SAXPAXPAVUObject@@@Z
??3UALAudioSubsystem@@SAXPAXPAVUObject@@PBG@Z
??3UALAudioSubsystem@@SAXPAXPAVUObject@@PBGK@Z
??3UALAudioSubsystem@@SAXPAXPAW4EInternal@@@Z
??4UALAudioSubsystem@@QAEAAV0@ABV0@@Z
??_7UALAudioSubsystem@@6BFExec@@@
??_7UALAudioSubsystem@@6BUObject@@@
?ChangeVoiceChatter@UALAudioSubsystem@@UAEXKKH@Z
?CheckSoundResource@UALAudioSubsystem@@UAEHPAVUSound@@@Z
?ControllMusicResource@UALAudioSubsystem@@UAEXM@Z
?Destroy@UALAudioSubsystem@@UAEXXZ
?EnterVoiceChat@UALAudioSubsystem@@UAEXXZ
?Exec@UALAudioSubsystem@@UAEHPBGAAVFOutputDevice@@@Z
?FindExt@UALAudioSubsystem@@QAEHPBG@Z
?FindProc@UALAudioSubsystem@@QAEXAAPAXPAD1AAHH@Z
?FindProcs@UALAudioSubsystem@@QAEXH@Z
?GEmptySoundSlot@UALAudioSubsystem@@2V?$TArray@H@@A
?GSoundObject@UALAudioSubsystem@@2V?$TArray@PAVUSound@@@@A
?GetMusicVolume@UALAudioSubsystem@@UAEMXZ
?GetNewStream@UALAudioSubsystem@@QAEHXZ
?GetOggVoiceVolume@UALAudioSubsystem@@UAEMXZ
?GetSoundVolume@UALAudioSubsystem@@UAEMXZ
?GetViewport@UALAudioSubsystem@@UAEPAVUViewport@@XZ
?GetWavVoiceVolume@UALAudioSubsystem@@UAEMXZ
?Init@UALAudioSubsystem@@UAEHXZ
?InternalConstructor@UALAudioSubsystem@@SAXPAX@Z
?IsMusicPlaying@UALAudioSubsystem@@UAEHXZ
?IsOggVoicePlaying@UALAudioSubsystem@@UAEHXZ
?IsPlaying@UALAudioSubsystem@@UAEHPAVAActor@@PAVUSound@@@Z
?IsVaild@UALAudioSubsystem@@UAEHXZ
?IsValidGetStream@UALAudioSubsystem@@UAEHXZ
?IsVoiceEnd@UALAudioSubsystem@@UAEHXZ
?IsWavVoicePlaying@UALAudioSubsystem@@UAEHXZ
?LeaveVoiceChat@UALAudioSubsystem@@UAEXXZ
?LowQualitySound@UALAudioSubsystem@@UAEHXZ
?NoteDestroy@UALAudioSubsystem@@UAEXPAVAActor@@@Z
?NoteDestroy@UALAudioSubsystem@@UAEXPAVULevelObject@@@Z
?PlayMusic@UALAudioSubsystem@@UAEHVFString@@MHHMH@Z
?PlayPrevMusic@UALAudioSubsystem@@UAEXMHHMH@Z
?PlaySoundW@UALAudioSubsystem@@UAEHPAVAActor@@HPAVUSound@@VFVector@@MMMHMM@Z
?PlaySoundW@UALAudioSubsystem@@UAEHPAVAActor@@HPAVUSound@@VFVector@@MMMHMMMMM@Z
?PlaySoundW@UALAudioSubsystem@@UAEHPAVUSound@@PAVULevelObject@@HVFVector@@MMMHMM@Z
?PlayVoice@UALAudioSubsystem@@UAEHVFString@@MHH@Z
?PostEditChange@UALAudioSubsystem@@UAEXXZ
?PrivateStaticClass@UALAudioSubsystem@@0VUClass@@A
?RegisterSound@UALAudioSubsystem@@UAEXPAVUSound@@@Z
?Serialize@UALAudioSubsystem@@UAEXAAVFArchive@@@Z
?SetI3DL2Listener@UALAudioSubsystem@@QAEXPAVUI3DL2Listener@@@Z
?SetMusicVolume@UALAudioSubsystem@@UAEXHMM@Z
?SetMusicVolume@UALAudioSubsystem@@UAEXM@Z
?SetOggVoiceVolume@UALAudioSubsystem@@UAEXM@Z
?SetSoundVolume@UALAudioSubsystem@@UAEXM@Z
?SetViewport@UALAudioSubsystem@@UAEXPAVUViewport@@@Z
?SetVolumes@UALAudioSubsystem@@QAEXXZ
?SetWavVoiceVolume@UALAudioSubsystem@@UAEXM@Z
?ShutdownAfterError@UALAudioSubsystem@@UAEXXZ
?SoundPriority@UALAudioSubsystem@@QAEMPAVUViewport@@VFVector@@MMH@Z
?StaticClass@UALAudioSubsystem@@SAPAVUClass@@XZ
?StaticConstructor@UALAudioSubsystem@@QAEXXZ
?StopAllMusic@UALAudioSubsystem@@UAEHMH@Z
?StopAllVoice@UALAudioSubsystem@@UAEHMH@Z
?StopMusic@UALAudioSubsystem@@UAEHHMH@Z
?StopSound@UALAudioSubsystem@@QAEXHM@Z
?StopSound@UALAudioSubsystem@@UAEHPAVAActor@@PAVUSound@@M@Z
?StopSound@UALAudioSubsystem@@UAEHPAVUSound@@PAVULevelObject@@M@Z
?UnregisterSound@UALAudioSubsystem@@UAEXPAVUSound@@@Z
?Update@UALAudioSubsystem@@UAEXPAVFSceneNode@@@Z
?UpdateAmbientSounds@UALAudioSubsystem@@QAEXAAV?$TArray@UALAmbient@@@@PAVUAmbientSoundObject@@PAVULevel@@AAVFVector@@@Z
?UpdateAmbientSounds@UALAudioSubsystem@@QAEXAAV?$TArray@UALAmbient@@@@PAVULevel@@AAVFVector@@H@Z
?alError@UALAudioSubsystem@@QAEHPAGH@Z
GPackage
_DllMain@12
autoclassUALAudioSubsystem

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6315d28b2c09acec200c5f297f35555a

Headers

File Characteristics

Imports

core

engine

vorbisfile

kernel32

Exports

Exports

Sections

.text Size: 82KB - Virtual size: 81KB

.rdata Size: 38KB - Virtual size: 37KB

.data Size: 9KB - Virtual size: 13KB

.rsrc Size: 512B - Virtual size: 504B

.reloc Size: 10KB - Virtual size: 10KB

.rmnet Size: 11KB - Virtual size: 12KB

.text
Size: 82KB - Virtual size: 81KB

.rdata
Size: 38KB - Virtual size: 37KB

.data
Size: 9KB - Virtual size: 13KB

.rsrc
Size: 512B - Virtual size: 504B

.reloc
Size: 10KB - Virtual size: 10KB

.rmnet
Size: 11KB - Virtual size: 12KB