b269fa8ab389351a51b0d5911d7fe042_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b269fa8ab389351a51b0d5911d7fe042_JaffaCakes118
Size

544KB
MD5

b269fa8ab389351a51b0d5911d7fe042
SHA1

9ac9eb28b24a0cd86569dca325c522fe9eb9fae7
SHA256

7ef7be454cf1d1fefa9a4b6790bf58a913336d9a20dd715ee686e4769de33133
SHA512

9091d4e29e552dee22caf5fdf7602342086c65a96355e9e08efb5001986dcdfaede07838b0582ffc48b8b4d2933bf12ad67350642845aaf473102065cb91997a
SSDEEP

12288:6mmn+/CtVAj6bJn13uJnietHZMM3oydLI9fkLmzbPAR/DwETgm4NNpGj4309IyoQ:31/3jSJn1+piyHZMM3oydLI9fkLmzbP0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b269fa8ab389351a51b0d5911d7fe042_JaffaCakes118

Files

b269fa8ab389351a51b0d5911d7fe042_JaffaCakes118
.dll windows:4 windows x86 arch:x86

258919a6008fbb6950d9201d3a038091

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\NetworkLib\Garena\trunk\client_libraries\Bin\GarenaSkin2.pdb

Imports

kernel32

CreateFileW
SetFilePointer
GetCurrentDirectoryW
SystemTimeToFileTime
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapCreate
GetModuleFileNameA
GetStdHandle
IsValidCodePage
GetOEMCP
GetACP
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetCPInfo
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
Sleep
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
VirtualAlloc
ReadFile
WriteFile
LocalFileTimeToFileTime
CloseHandle
LeaveCriticalSection
EnterCriticalSection
SetLastError
RaiseException
lstrlenW
lstrcmpW
GetCurrentThreadId
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
lstrcmpiW
FlushInstructionCache
VirtualFree
IsProcessorFeaturePresent
GetCurrentProcess
MultiByteToWideChar
WideCharToMultiByte
lstrcpyW
LoadLibraryA
GetProcAddress
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
GetLastError

user32

LoadCursorW
GetClassInfoExW
RegisterClassExW
FillRect
GetMenu
AdjustWindowRectEx
DrawIconEx
PtInRect
InvalidateRect
PostMessageW
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemCount
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
EnableWindow
GetScrollInfo
SetScrollInfo
ShowWindow
SetRectEmpty
GetClientRect
GetComboBoxInfo
CopyRect
GetDlgCtrlID
CreateWindowExW
IsWindow
ReleaseCapture
SetFocus
SetCapture
DestroyWindow
IsWindowVisible
DrawTextW
TrackMouseEvent
DrawIcon
SetWindowPos
EndPaint
GetClassNameW
BeginPaint
GetParent
GetWindowTextLengthW
GetWindowTextW
GetIconInfo
GetSystemMetrics
OffsetRect
ReleaseDC
GetWindowDC
GetWindowRect
GetWindow
GetTopWindow
DefWindowProcW
CallWindowProcW
IsMenu
GetWindowLongW
SetWindowLongW
SendMessageW
GetDC
GetDesktopWindow
RegisterWindowMessageW
TrackPopupMenu
UnregisterClassA
ScreenToClient

gdi32

CreateCompatibleDC
ExcludeClipRect
GetTextMetricsW
CreateSolidBrush
SetViewportOrgEx
SetTextColor
SetBkMode
RestoreDC
SaveDC
StretchBlt
BitBlt
ExtTextOutW
SelectObject
SetBkColor
CreateDIBSection
DeleteDC
CreateCompatibleBitmap
CreateFontIndirectW
DeleteObject
CreateDIBitmap

comctl32

InitCommonControlsEx

msimg32

TransparentBlt

Exports

Exports

_GetColor2@8
_GetColor@4
_GetGameIcon@12
_GetImage@8
_GetImageFromSkin2@8
_GetImageFromSkin@4
_GetSkinFont@4
_InstallSkin2@8
_InstallSkin@0
_RemoveSkin@4
_SetSkinPath@4
_TrackSkinPopupMenu@20
_UninstallSkin2@4
_UninstallSkin@0

Sections

.text
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

258919a6008fbb6950d9201d3a038091

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comctl32

msimg32

Exports

Exports

Sections

.text Size: 364KB - Virtual size: 363KB

.rdata Size: 64KB - Virtual size: 62KB

.data Size: 16KB - Virtual size: 23KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 28KB - Virtual size: 24KB

.text Size: 64KB - Virtual size: 64KB

.text
Size: 364KB - Virtual size: 363KB

.rdata
Size: 64KB - Virtual size: 62KB

.data
Size: 16KB - Virtual size: 23KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 28KB - Virtual size: 24KB

.text
Size: 64KB - Virtual size: 64KB