846bb658c8c69fdef28b5a25bec61386_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

846bb658c8c69fdef28b5a25bec61386_JaffaCakes118
Size

84KB
MD5

846bb658c8c69fdef28b5a25bec61386
SHA1

946773d81701c710626ef1dd277aca07881e8d38
SHA256

322edf6c984d58bce322ea2b651e64345520a03afe699e3318373a59b9311a20
SHA512

d4fe9e4fb93fc05aee3479e94ef5f7f25b6dc4198024ac5c010b00e0a899023ada4669fe03cc56bc09fd10e42c0069e68bd9b6fc4c79e9fc934ab113765f7f48
SSDEEP

1536:ZU2WWOLjfxRr/9fq8LMy/GAsZ4xgHsEAE4oO:W2Wt/pRr1j/QuxgHxAE4oO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
846bb658c8c69fdef28b5a25bec61386_JaffaCakes118

Files

846bb658c8c69fdef28b5a25bec61386_JaffaCakes118
.exe windows:5 windows x86 arch:x86

990184350b27369e872a762c604e7107

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Muhtasim\Desktop\treznet\trezclient\src\Debug\mmbngame.pdb

Imports

sdl

SDL_GetError
SDL_GetKeyState
SDL_strlcpy
SDL_getenv
SDL_GetTicks
SDL_EnableUNICODE
SDL_FillRect
SDL_PollEvent
SDL_Flip
SDL_Delay
SDL_Quit
SDL_CreateRGBSurface
SDL_LockSurface
SDL_UnlockSurface
SDL_DisplayFormat
SDL_MapRGB
SDL_SetColorKey
SDL_UpperBlit
SDL_Init
SDL_SetVideoMode
SDL_WM_SetCaption
SDL_GetMouseState
SDL_FreeSurface
SDL_SetModuleHandle
SDL_strlcat

sdl_image

IMG_Load

msvcr100

??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
memmove
printf
strlen
memcpy
memset
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
__CxxFrameHandler3
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_unlock
__dllonexit
_lock
strrchr
_except_handler4_common
_invoke_watson
_controlfp_s
??2@YAPAXI@Z
_acmdln
??3@YAXPAX@Z
fprintf
sprintf
freopen
setvbuf
setbuf
isspace
atoi
fclose
fopen
fgetc
remove
_onexit
__iob_func

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

ws2_32

bind
connect
ioctlsocket
recv
WSAStartup
socket
inet_addr
htons
send
WSACleanup

kernel32

InterlockedExchange
InterlockedCompareExchange
HeapSetInformation
Sleep
GetModuleFileNameA
LoadLibraryA
FreeLibrary
GetCommandLineA
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
GetStartupInfoW

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

990184350b27369e872a762c604e7107

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

sdl

sdl_image

msvcr100

msvcp100

ws2_32

kernel32

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 2KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 2KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 3KB - Virtual size: 3KB