aace5d86fb7af023e304843c7fc09714_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

aace5d86fb7af023e304843c7fc09714_JaffaCakes118
Size

911KB
MD5

aace5d86fb7af023e304843c7fc09714
SHA1

f85ece9ced00ca710f7b559636185e22d6a5bcb9
SHA256

be2bcf44deb0c5ca3fee6392f5ace502c5f2f05a7910048cccb1e00b6c1478cf
SHA512

2af0a28ab5d1752460910b9362dc08e054a9093a1b6dfe3d3b7dd4b462b321da5d7f3a7a2bdb92ad8b6e3c82020debcf01e78f04f7e935f075cc3b3ac3b2209a
SSDEEP

24576:qRG74mVwWkmpKaqnBiNOMOy6X6DUwEqGW:t4m5LpXqnBiNO+zwW

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/LevelEdit.exe
unpack001/PacCheat.exe
unpack001/PacMan.exe

Files

aace5d86fb7af023e304843c7fc09714_JaffaCakes118
.rar
Clock.ctl
EditMod.bas
.vbs
Editor.frm
.vbs
Editor.frx
FrmGroup.frm
.vbs
Images.bas
.vbs
LevelEdit VB5.vbp
LevelEdit.exe
.exe windows:4 windows x86 arch:x86

2b50d4929b1af4b98300b55383d6d63a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
ord588
__vbaStrVarMove
__vbaLineInputStr
__vbaLenBstr
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
ord518
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaLateMemSt
__vbaVarForInit
__vbaExitProc
__vbaObjSet
__vbaOnError
ord595
_adj_fdiv_m16i
ord303
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
ord520
ord309
__vbaBoolVarNull
_CIsin
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
ord529
__vbaStrCmp
__vbaVarTstEq
__vbaObjVar
__vbaVarLateMemSt
__vbaVarOr
__vbaCastObjVar
_adj_fpatan
__vbaR4Var
__vbaLateIdCallLd
EVENT_SINK_Release
__vbaNew
_CIsqrt
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
ord530
__vbaFPException
ord533
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
__vbaR8Str
__vbaVarInt
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaVarNot
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
__vbaVarCmpEq
__vbaLateMemCall
__vbaVarAdd
__vbaVarDup
ord613
__vbaFpI2
__vbaVarLateMemCallLd
__vbaVarTstGe
__vbaVarCopy
__vbaR8IntI2
__vbaLateMemCallLd
ord617
_CIatan
__vbaCastObj
__vbaStrMove
__vbaStrVarCopy
ord619
_allmul
_CItan
__vbaFPInt
__vbaVarForNext
_CIexp
__vbaFreeObj
__vbaFreeStr
ord581

Sections

.text
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LevelEdit.vbw
MdiForm.frm
MdiForm.frx
OpenDlg.frm
.vbs
OpenDlg.frx
OptFrm.frm
OptFrm.frx
OptFrm.log
OptionsFrm.frm
.vbs
OptionsFrm.frx
PACMAN PROJECT GROUP VB5.vbg
PacCheat.exe
.exe windows:4 windows x86 arch:x86

b13132f0dcd121c35c0b4f350a728fa3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaExitProc
__vbaOnError
ord595
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord530
__vbaFPException
ord533
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PacCheatSource.zip
.zip
PacCheat.frm
PacCheat.frx
PacCheat.vbp
PacCheat.vbw
PacManLogo.gif
.gif
PacFrm.frm
.vbs
PacFrm.frx
PacMan VB5.vbp
PacMan.exe
.exe windows:4 windows x86 arch:x86

48b1916a4f3fefa1367563f21e80e6f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
ord690
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaLineInputStr
__vbaLenBstr
__vbaStrVarMove
ord588
__vbaLateIdCall
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaRaiseEvent
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaVarTstLe
__vbaLateMemSt
__vbaExitProc
ord593
__vbaVarForInit
ord594
ord595
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
ord598
__vbaFpR4
ord520
__vbaFpR8
__vbaBoolVarNull
__vbaVarTstLt
_CIsin
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaVarTstEq
__vbaObjVar
__vbaI2I4
DllFunctionCall
__vbaVarLateMemSt
ord670
__vbaCastObjVar
_adj_fpatan
__vbaFixstrConstruct
__vbaLateIdCallLd
__vbaStrR8
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord530
ord608
__vbaFPException
ord533
__vbaStrVarVal
__vbaVarCat
ord535
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
__vbaR8Str
__vbaVarInt
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaVarNot
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
ord689
__vbaVarCmpEq
__vbaLateMemCall
__vbaVarAdd
__vbaStrToAnsi
__vbaVarDup
ord613
__vbaFpI2
__vbaFpI4
ord616
__vbaVarCopy
__vbaVarLateMemCallLd
__vbaR8IntI2
ord617
__vbaLateMemCallLd
_CIatan
__vbaCastObj
__vbaStrMove
ord619
__vbaR8IntI4
_allmul
__vbaLateIdSt
_CItan
__vbaFPInt
__vbaVarForNext
_CIexp
__vbaFreeStr
__vbaFreeObj
ord581

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PacMan.frx
PacMan.vbw
PacMod.bas
.vbs
Progbar.frm
Progbar.frx
RepFrm.frm
RepFrm.frx
RndButton.ctl
SaveDlg.frm
.vbs
SaveDlg.frx
Scheme.bas
.vbs
Shaper.bas
TABCTL32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

aa8b0ec5b7d56e08d6614ae243221096

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetStringTypeW
GetStringTypeA
VirtualAlloc
LCMapStringW
LCMapStringA
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
ExitProcess
RaiseException
GetOEMCP
GetACP
GetCPInfo
GetModuleHandleA
GetCommandLineA
lstrcpynA
GetFileAttributesA
GetVersion
DisableThreadLibraryCalls
FindResourceA
LoadResource
LockResource
GetLastError
InterlockedDecrement
InterlockedIncrement
GetProcAddress
GetLocaleInfoA
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA
MultiByteToWideChar
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
lstrcmpiA
lstrlenA
GlobalSize
IsDBCSLeadByte
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
lstrcpyA
EnterCriticalSection
HeapReAlloc
lstrcmpA
GetProcessHeap
InitializeCriticalSection
lstrcatA

user32

SetFocus
MoveWindow
GetWindow
ShowWindow
IsWindowEnabled
PtInRect
IsWindowVisible
GetParent
SetWindowRgn
GetSysColor
CopyRect
DrawFocusRect
DestroyWindow
GetWindowDC
GetWindowRect
CreateWindowExA
SetWindowLongA
CallWindowProcA
GetWindowLongA
SetRectEmpty
SetWindowPos
OffsetRect
WinHelpA
GetNextDlgTabItem
CharNextA
GetClipboardFormatNameA
ScreenToClient
MapWindowPoints
SetCursorPos
RegisterClipboardFormatA
UnregisterClassA
InvalidateRect
ReleaseCapture
CreateDialogIndirectParamA
IsChild
SetParent
EndPaint
IsDialogMessageA
FillRect
InflateRect
EndDialog
GetActiveWindow
DialogBoxParamA
GetCursorPos
LockWindowUpdate
EqualRect
IsWindow
MessageBeep
MessageBoxA
GetDlgItemInt
GetDlgItemTextA
IsDlgButtonChecked
SendDlgItemMessageA
SetDlgItemTextA
SetDlgItemInt
CheckDlgButton
GetDlgItem
wsprintfA
GetKeyState
DefWindowProcA
SetCursor
PeekMessageA
SendMessageA
GetFocus
GetDC
ReleaseDC
SetRect
IsCharAlphaNumericA
VkKeyScanA
CreateAcceleratorTableA
EnableWindow
LoadCursorA
RegisterClassA
DestroyAcceleratorTable
LoadStringA
GetSystemMetrics
ClientToScreen
GetClientRect
BeginPaint
IntersectRect

ole32

ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
OleSaveToStream
OleLoadFromStream

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

SysAllocStringLen
OleCreatePropertyFrame
LoadTypeLi
SafeArrayCopy
SafeArrayRedim
SafeArrayPutElement
SafeArrayGetElement
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopyInd
VariantCopy
LoadTypeLibEx
UnRegisterTypeLi
RegisterTypeLi
CreateErrorInfo
SetErrorInfo
VariantChangeType
VariantInit
SysStringLen
OleTranslateColor
GetErrorInfo
OleLoadPicture
SysAllocStringByteLen
SysStringByteLen
LoadRegTypeLi
OleCreateFontIndirect
VariantClear
OleCreatePictureIndirect
SysAllocString
SysFreeString

gdi32

LPtoDP
GetViewportExtEx
CreateRectRgnIndirect
GetWindowExtEx
SetMapMode
GetNearestColor
CreatePalette
GetBitmapBits
CreateDIBitmap
GetDIBits
CopyEnhMetaFileA
CopyMetaFileA
CreateDCA
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
GetDeviceCaps
DeleteDC
DeleteObject
StretchBlt
SelectObject
CreateBitmap
CreateCompatibleDC
RealizePalette
SelectPalette
GetOutlineTextMetricsA
BitBlt
CreateCompatibleBitmap
SetTextColor
SetBkColor
CreateRectRgn
CreateFontIndirectA
GetObjectA
SelectClipRgn
CombineRgn
CreatePolygonRgn
SetBkMode
CreatePen
TextOutA
GetTextColor
LineTo
MoveToEx
GetTextExtentPoint32A
GetCharWidthA
GetCurrentPositionEx
SetTextAlign
GetStockObject
CreateSolidBrush
OffsetRgn
SetBrushOrgEx
UnrealizeObject
CreateICA
GetPaletteEntries

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
images/food/1up.Img
.gif
images/food/Beer.Img
.gif
images/food/Berry.Img
.gif
images/food/Cherry.Img
.gif
images/food/Protect.Img
.gif
images/food/Shield2.Img
.gif
images/food/ShieldMsk2.Img
.gif
images/schemes/ChocolateBack.img
.gif
images/schemes/ChocolateFood.img
.gif
images/schemes/ChocolateWall.img
.gif
images/schemes/ChristmasBack.img
.gif
images/schemes/ChristmasFood.img
.gif
images/schemes/ChristmasWall.img
.gif
images/schemes/ChristmasWall2.img
.gif
images/schemes/MetalBack.img
.gif
images/schemes/MetalFood.img
.gif
images/schemes/MetalWall.img
.gif
images/schemes/MetalWall2.img
.gif
images/schemes/SkyBack.img
.jpg
images/schemes/SkyFood.img
.gif
images/schemes/SkyWall.img
.gif
images/schemes/SpaceBack.img
.gif
images/schemes/SpaceFood.img
.gif
images/schemes/SpaceWall.img
.gif
images/schemes/SpaceWall2.img
.gif
images/schemes/StdBack.img
.gif
images/schemes/StdFood.img
.gif
images/schemes/StdWall.img
.gif
images/sprites/Ghoul1.Img
.gif
images/sprites/Ghoul2.Img
.gif
images/sprites/Ghoul3.Img
.gif
images/sprites/Ghoul4.Img
.gif
images/sprites/PacDn.Img
.gif
images/sprites/PacDnClosed.Img
.gif
images/sprites/PacLeft.Img
.gif
images/sprites/PacLeftClosed.Img
.gif
images/sprites/PacRight.Img
.gif
images/sprites/PacRightClosed.Img
.gif
images/sprites/PacUp.Img
.gif
images/sprites/PacUpClosed.Img
.gif
images/sprites/Skull.Img
.gif
images/titles/EndGameCon.img
.jpg
images/titles/EndGameOver.img
.jpg
images/titles/LoadingScreen.img
.jpg
images/titles/MainPic.img
.jpg
images/titles/PacManLogo.img
.gif
images/titles/Score.img
.gif
images/usercontrols/GreenIn.Img
.jpg
images/usercontrols/GreenOut.Img
.jpg
images/usercontrols/ShieldTimer0.Img
.gif
images/usercontrols/ShieldTimer1.Img
.gif
images/usercontrols/ShieldTimer2.Img
.gif
images/usercontrols/ShieldTimer3.Img
.gif
images/usercontrols/ShieldTimer4.Img
.gif
images/usercontrols/ShieldTimer5.Img
.gif
images/usercontrols/ShieldTimer6.Img
.gif
images/usercontrols/Timer0.Img
.gif
images/usercontrols/Timer1.Img
.gif
images/usercontrols/Timer2.Img
.gif
images/usercontrols/Timer3.Img
.gif
images/usercontrols/Timer4.Img
.gif
images/usercontrols/Timer5.Img
.gif
images/usercontrols/Timer6.Img
.gif
levels/Level1.PML
levels/Level2.PML
levels/Level3.PML
levels/Level4.PML
levels/Level5.PML
levels/Level6.PML
levels/Level7.PML
levels/Level8.PML
levels/Level9.PML
levels/New Folder/Level1.PML
levels/New Folder/Level2.PML
levels/New Folder/Level3.PML
levels/New Folder/Level4.PML
levels/New Folder/Level5.PML
levels/New Folder/Level6.PML
levels/New Folder/Level7.PML
levels/New Folder/Level8.PML
levels/New Folder/Level9.PML
levels/Tmp123Lev
levels/下载说明.htm
.html .js polyglot
下载说明.htm
.html .js polyglot
吃豆子游戏.txt

Sharing

General

Malware Config

Signatures

Files

2b50d4929b1af4b98300b55383d6d63a

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 116KB - Virtual size: 113KB

.data Size: 4KB - Virtual size: 14KB

.rsrc Size: 4KB - Virtual size: 2KB

b13132f0dcd121c35c0b4f350a728fa3

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 20KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 2KB

48b1916a4f3fefa1367563f21e80e6f9

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 140KB - Virtual size: 136KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 2KB

aa8b0ec5b7d56e08d6614ae243221096

Code Sign

Signer

Headers

File Characteristics

Imports

kernel32

user32

ole32

advapi32

oleaut32

gdi32

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 135KB

.data Size: 14KB - Virtual size: 13KB

.rsrc Size: 39KB - Virtual size: 39KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 116KB - Virtual size: 113KB

.data
Size: 4KB - Virtual size: 14KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 140KB - Virtual size: 136KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 136KB - Virtual size: 135KB

.data
Size: 14KB - Virtual size: 13KB

.rsrc
Size: 39KB - Virtual size: 39KB

.reloc
Size: 8KB - Virtual size: 7KB