dcca18ca989bde81622ff7380026b51b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dcca18ca989bde81622ff7380026b51b_JaffaCakes118
Size

82KB
MD5

dcca18ca989bde81622ff7380026b51b
SHA1

bf6bdfdffc78a93fa7e757f49f536a8a82cb6f3a
SHA256

47b689e893abd2150fdeff49370ff7d3bf6cf6baba806b99821d77e431331886
SHA512

64c96870d5a511cf42a612a1b0fc8642349446eaeb74b4c4002722bf3553ad1330cdbffedfa0ad27abf05476a980d7f5ca410e0369022c6efdcc261c2bb8f612
SSDEEP

1536:Ks5ZeurKxR7IExqILLk6NWyf2XvTw307MKsgOs:Ks5ZeKoRU2S6N1OXvTwk7MKsgOs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcca18ca989bde81622ff7380026b51b_JaffaCakes118

Files

dcca18ca989bde81622ff7380026b51b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6ed16e7ca0ffb84e18174a7d937b2b50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Muhtasim\Desktop\treznet\trezclient\src\Debug\mmbngame.pdb

Imports

sdl

SDL_GetError
SDL_GetKeyState
SDL_strlcpy
SDL_getenv
SDL_GetTicks
SDL_EnableUNICODE
SDL_FillRect
SDL_PollEvent
SDL_Flip
SDL_Delay
SDL_Quit
SDL_CreateRGBSurface
SDL_LockSurface
SDL_UnlockSurface
SDL_DisplayFormat
SDL_MapRGB
SDL_SetColorKey
SDL_UpperBlit
SDL_Init
SDL_SetVideoMode
SDL_WM_SetCaption
SDL_GetMouseState
SDL_FreeSurface
SDL_SetModuleHandle
SDL_strlcat

sdl_image

IMG_Load

msvcr100

??1exception@std@@UAE@XZ
??2@YAPAXI@Z
__CxxFrameHandler3
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
memmove
printf
strlen
memcpy
memset
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
?what@exception@std@@UBEPBDXZ
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_unlock
__dllonexit
_lock
strrchr
_except_handler4_common
_invoke_watson
_controlfp_s
??0exception@std@@QAE@ABQBD@Z
_acmdln
??3@YAXPAX@Z
fprintf
sprintf
freopen
setvbuf
setbuf
isspace
atoi
fclose
fopen
fgetc
remove
_onexit
__iob_func

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

ws2_32

bind
connect
ioctlsocket
recv
WSAStartup
socket
inet_addr
htons
send
WSACleanup

kernel32

InterlockedExchange
InterlockedCompareExchange
HeapSetInformation
Sleep
GetModuleFileNameA
LoadLibraryA
FreeLibrary
GetCommandLineA
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
GetStartupInfoW

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ed16e7ca0ffb84e18174a7d937b2b50

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

sdl

sdl_image

msvcr100

msvcp100

ws2_32

kernel32

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 2KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 2KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 3KB - Virtual size: 3KB