899f7a7e45a4da66ddd2be41d57ff085_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

899f7a7e45a4da66ddd2be41d57ff085_JaffaCakes118
Size

670KB
MD5

899f7a7e45a4da66ddd2be41d57ff085
SHA1

4409693bbe1a94c939589d0086552f7327755994
SHA256

9567fe10e815c505de5d83bc33b02e8f28d7379caa6e5599f7acd8444d897d52
SHA512

e3583b5742d833f31fd16669b7788c0476662f70996e23386364dd1ad4b79aa0d96c60e59d179150954f331872148ad7e892b3073e51ec7e6730f7749e372e30
SSDEEP

12288:jbg04agUYlothAbgr1sya/vdnx1MHQbRLSnvB:jbnGshAUr1EHRmQbRLSvB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
899f7a7e45a4da66ddd2be41d57ff085_JaffaCakes118

Files

899f7a7e45a4da66ddd2be41d57ff085_JaffaCakes118
.dll windows:5 windows x86 arch:x86

80b72a255cc39e480e41570c3d228e12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\BASE\BASE Baru\Indonesian Cheater Creativ\Indonesian-cheats\Release\Indonesian-Cheats.pdb

Imports

kernel32

CreateThread
VirtualProtect
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
DisableThreadLibraryCalls
VirtualAlloc
IsBadWritePtr
Beep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
IsBadReadPtr
InterlockedCompareExchange
InterlockedExchange
OutputDebugStringA
IsProcessorFeaturePresent
GetSystemInfo
VirtualFree
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
ExitProcess

user32

GetDesktopWindow
DefWindowProcA
SetRect
GetSystemMetrics
RegisterClassExA
MessageBeep
GetAsyncKeyState
MessageBoxA
CreateWindowExA

msvcp90

??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ

winmm

timeGetTime

d3d9

Direct3DCreate9

msvcr90

_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
__CxxFrameHandler
modf
iswspace
iswalpha
iswdigit
iswpunct
_finite
_CIacos
strncpy
_ftol
??2@YAPAXI@Z
_time64
_localtime64
??3@YAXPAX@Z
system
strstr
malloc
memmove
vsprintf
sprintf
floor
free
memset
_CIsqrt

gdi32

GetObjectA
GetObjectW
GetTextMetricsA
GetGlyphOutlineA
CreateDIBSection
SetTextAlign
DeleteObject
SelectObject
GetCharacterPlacementA
GetCharacterPlacementW
SetBkMode
CreateFontIndirectW
CreateFontIndirectA
DeleteDC
GetTextMetricsW
ExtTextOutW
MoveToEx
ExtTextOutA
CreateCompatibleDC
SetMapMode
SetBkColor
SetTextColor
GetFontLanguageInfo

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA

Sections

.text
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 291KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

80b72a255cc39e480e41570c3d228e12

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp90

winmm

d3d9

msvcr90

gdi32

advapi32

Sections

.text Size: 207KB - Virtual size: 206KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 80KB - Virtual size: 91KB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 21KB - Virtual size: 21KB

.text Size: 291KB - Virtual size: 292KB

.text
Size: 207KB - Virtual size: 206KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 80KB - Virtual size: 91KB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 21KB - Virtual size: 21KB

.text
Size: 291KB - Virtual size: 292KB