63a9bcb5f3b7af83a4e07927665eb29e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

63a9bcb5f3b7af83a4e07927665eb29e_JaffaCakes118
Size

1.3MB
MD5

63a9bcb5f3b7af83a4e07927665eb29e
SHA1

ffaf0bc7546d61bab13bb31b92aa471c30a78f86
SHA256

6d4c90cfca28c04b5dd762c42ddc68bc318d158c1fd7c703af24555056531a0b
SHA512

b8d7bd8a590fd82abae7bae4786f8c3f89988c44e630aeeace493b7b82efb27bb4f11e08cf6f00d4b401e46982ce02cab50c3f6db1d4878e0c35e2250429084b
SSDEEP

24576:0v4ICmlShjy7IEK2J/j6/Wg2Wo35TzC9MkDAIpu2fE:yCmlmk/jEVoJaM7IjE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63a9bcb5f3b7af83a4e07927665eb29e_JaffaCakes118

Files

63a9bcb5f3b7af83a4e07927665eb29e_JaffaCakes118
.dll windows:5 windows x86 arch:x86

50fbf6ad14ce4be780d6bba0472e05f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Documents and Settings\Antonio\Desktop\Cyno__Base__WarRock_Fix_By_Eagl3&Sirotricks\Cyno__Base__WarRock_Fix_By_Eagl3\Cyno__Base__WarRock_Fix_By_Eagl3\Debug\VixBoxAndMarekiarox D3D V2.pdb

Imports

kernel32

LoadLibraryA
GetProcAddress
CreateThread
GetModuleHandleA
ExitProcess
Sleep
VirtualProtect
MulDiv
lstrcmpiA
GetFullPathNameA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
FindResourceW
FindResourceA
SizeofResource
LoadResource
LockResource
UnmapViewOfFile
CloseHandle
CreateFileW
CreateFileA
CreateFileMappingA
GetFileSize
MapViewOfFile
GetLastError
WriteFile
OutputDebugStringA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
GetSystemInfo
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
RaiseException
DebugBreak
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
InterlockedExchange
InterlockedCompareExchange
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameW
VirtualQuery
FreeLibrary
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId

user32

GetAsyncKeyState
MapVirtualKeyW
FindWindowA
MessageBoxA
GetSystemMetrics
FindWindowW
SetRect

gdi32

GetCharacterPlacementW
GetGlyphOutlineA
GetTextMetricsW
GetFontLanguageInfo
GetTextMetricsA
GetObjectW
SetBkMode
GetCharacterPlacementA
GetTextExtentPoint32W
MoveToEx
ExtTextOutA
CreateFontIndirectW
CreateFontIndirectA
DeleteDC
DeleteObject
ExtTextOutW
GetObjectA
SetTextAlign
SetBkColor
SetTextColor
SelectObject
CreateFontW
GetDeviceCaps
SetMapMode
CreateDIBSection
CreateCompatibleDC

msvcr90d

_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_CrtSetCheckCount
_decode_pointer
_encoded_null
_free_dbg
_malloc_dbg
_encode_pointer
_CRT_RTC_INITW
memcmp
malloc
__CxxFrameHandler3
??3@YAXPAX@Z
strcpy
atan
sin
atan2
sqrt
memcpy
strlen
??2@YAPAXI@Z
sprintf
free
ceil
memset
wcsncpy
_CIexp
_CIfmod
_CIsinh
_CItanh
_fpclass
tmpfile
fclose
fwrite
_CIacos
_finite
_ftol
_CIpow
strncpy
__CxxFrameHandler
iswpunct
iswdigit
iswalpha
iswspace
modf
_except_handler3
_controlfp
longjmp
_setjmp3
isdigit
isspace
_vsnprintf
sscanf
frexp
_strdate
_strtime
ldexp
_strdup
setlocale
floor
_CIasin
exit
_snprintf
_stricmp
atof
tolower
isalnum
isalpha
isxdigit
toupper
atoi
memmove
qsort
_isnan
strchr
fread
fseek
_CIcosh

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50fbf6ad14ce4be780d6bba0472e05f9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msvcr90d

advapi32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 130KB - Virtual size: 129KB

.data Size: 51KB - Virtual size: 73KB

.idata Size: 5KB - Virtual size: 5KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 30KB - Virtual size: 30KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 130KB - Virtual size: 129KB

.data
Size: 51KB - Virtual size: 73KB

.idata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 30KB - Virtual size: 30KB