df3de6d292e13ba276167ba883a64a0f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

df3de6d292e13ba276167ba883a64a0f_JaffaCakes118
Size

4.0MB
MD5

df3de6d292e13ba276167ba883a64a0f
SHA1

b53b14c74c017bced7b4f11bccab9a981115d5af
SHA256

62fc02634d65cfd14e866b07b7eefe33259f590a14666e44c05e323a2487c2f9
SHA512

8e0845051e7515761e746d81731c36fdf078bf78f4088e73b86c3e9282ad0cf312bf58e9688f03d85197a009ea7b04b94bf21b20321aa275ba351134eaf59437
SSDEEP

98304:hxmkauTMWIQ1+TSkzo1SD0wEexbPLJEiKzUS6oWALAcGO61:hDTDb+TQlwEexXJOZNAcGOK

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack002/Beyond_wavwriter.exe	upx
static1/unpack009/sns_wavwriter.exe	upx

Unsigned PE 9 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Beyond_wavwriter.exe
unpack004/bf_wavwriter.exe
unpack005/bnz_wavwriter.exe
unpack006/rude_awakening.exe
unpack007/all_what_remains.exe
unpack008/prophecy_wavwriter.exe
unpack009/sns_wavwriter.exe
unpack001/aDDict2.exe
unpack001/bass.dll

Files

df3de6d292e13ba276167ba883a64a0f_JaffaCakes118
.zip
!update.txt
Data/musics/beyond_wavwriter.zip
.zip
Beyond_wavwriter.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 332KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
file_id.diz
wavwriter.nfo
Data/musics/binary_wavwriter.zip
.zip
bf_wavwriter.exe
.exe windows:6 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 10KB - Virtual size: 632KB
file_id.diz
wavwriter.nfo
Data/musics/buenzli_wavwriter.zip
.zip
bnz_wavwriter.exe
.exe windows:6 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 9KB - Virtual size: 440KB
file_id.diz
wavwriter.nfo
Data/musics/chaos_theory_wavwriter.zip
.zip
file_id.diz
rude_awakening.exe
.exe windows:6 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 14KB - Virtual size: 416KB
wavwriter.nfo
Data/musics/memento_wavwriter.zip
.zip
all_what_remains.exe
.exe windows:6 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 9KB - Virtual size: 368KB
file_id.diz
wavwriter.nfo
Data/musics/nemesis_wavwriter.zip
.zip
file_id.diz
prophecy_wavwriter.exe
.exe windows:6 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 16KB - Virtual size: 3.0MB
wavwriter.nfo
Data/musics/sns_wavwriter.zip
.zip
file_id.diz
sns_wavwriter.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 320KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wavwriter.nfo
Data/projects/4players_precalc.dmo
Data/projects/4players_release.dmo
Data/projects/DOF_Hall.dmo
Data/projects/beyond_final.dmo
Data/projects/beyond_precalc.dmo
Data/projects/binary_ati_release.dmo
Data/projects/binary_nvidia_release.dmo
Data/projects/binary_precalc.dmo
Data/projects/buenzli_precalc.dmo
Data/projects/buenzli_release.dmo
Data/projects/chaos_theory_precalc.dmo
Data/projects/chaos_theory_release.dmo
Data/projects/memento_precalc.dmo
Data/projects/memento_release.dmo
Data/projects/nemesis_precalc.dmo
Data/projects/nemesis_release.dmo
Data/projects/sns_precalc.dmo
Data/projects/sns_release.dmo
Data/projects/tutorial1.dmo
Data/scenes/cnslogo.scn
Data/textures/BUENZLIJAPAN.tex
Data/textures/BlueMarble.tex
Data/textures/Galaxies.tex
Data/textures/Planet.tex
Data/textures/buggy.tex
Data/textures/leaves.tex
Data/textures/protozoa3.tex
FILE_ID.DIZ
aDDict2.exe
.exe windows:4 windows x86 arch:x86

ad03cf29484731f953d2774a7eedb3d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

glu32

gluBuild2DMipmaps
gluOrtho2D
gluDeleteQuadric
gluCylinder
gluNewQuadric
gluLookAt
gluPerspective
gluPickMatrix

opengl32

glVertex2f
glTexCoord2f
glGetString
wglGetProcAddress
glTexParameteri
glBlendFunc
glBindTexture
glColor4f
glClear
glRasterPos2i
glDeleteTextures
glPopMatrix
glPushMatrix
glTexEnvfv
glTexEnvi
glTranslatef
glNormal3fv
glLightfv
glIsTexture
glListBase
wglUseFontBitmapsA
glRasterPos2f
glGetError
glReadPixels
glScalef
glTexCoord2i
glVertex3fv
glIsList
glColor3fv
glNormal3f
glTexImage2D
glMaterialfv
glColor4fv
glVertex2i
glPushAttrib
glDisable
glClearColor
glPopAttrib
glScissor
glLoadIdentity
glViewport
glMatrixMode
wglCreateContext
wglMakeCurrent
glEnable
glTexGeni
glGenLists
glNewList
glBegin
glColor4d
glVertex3f
glEnd
glRotatef
glCopyTexImage2D
glEndList
glGenTextures
glMultMatrixf
glLoadMatrixf
glGetIntegerv
glDeleteLists
glCallList
glDepthFunc
glAlphaFunc
glDepthMask
glLineWidth
glSelectBuffer
glRenderMode
glInitNames
glPushName
glLoadName
glGetFloatv
glPointSize
glFogfv
glFogf
glHint
glFogi
glCullFace
glCallLists
glNormal3d
glVertex3d

kernel32

GetStartupInfoA
CreateThread
GetCommandLineA
Sleep
CreateDirectoryA
GetModuleHandleA
FindFirstFileA
lstrcmpA
FindNextFileA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree

user32

GetSystemMetrics
ReleaseCapture
SetCapture
ClientToScreen
SetCursorPos
SendMessageA
SetTimer
MessageBoxA
GetCursorPos
ScreenToClient
DefWindowProcA
LoadCursorA
RegisterClassA
EnumDisplaySettingsA
AdjustWindowRectEx
CreateWindowExA
ShowWindow
SetForegroundWindow
SetFocus
SetCursor
ChangeDisplaySettingsA
ShowCursor
PeekMessageA
TranslateMessage
DispatchMessageA
ReleaseDC
FillRect
LoadIconA
GetDC

gdi32

SwapBuffers
DeleteDC
GetDIBits
TextOutA
SetTextCharacterExtra
SetTextColor
SetBkMode
GetStockObject
SelectObject
GetTextExtentPointA
ChoosePixelFormat
SetPixelFormat
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontA

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPictureEx

dsound

ord11

msvcrt

_adjust_fdiv
floor
strchr
_CIpow
exit
strstr
vsprintf
printf
ftell
fseek
fgetpos
__CxxFrameHandler
fread
fopen
fwrite
fprintf
fclose
sprintf
srand
rand
??3@YAXPAX@Z
_ftol
??2@YAPAXI@Z
_snprintf
remove
tolower
_CIacos
toupper
fgets
sscanf
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
rename
__p__commode
__p__fmode
__set_app_type
_controlfp

bass

BASS_StreamCreateFile
BASS_Init
BASS_StreamFree
BASS_StreamGetLength
BASS_ChannelBytes2Seconds
BASS_ChannelStop
BASS_StreamPlay
BASS_ChannelSetPosition
BASS_ChannelSeconds2Bytes
BASS_ChannelGetPosition

Sections

.text
Size: 560KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.2MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
aDDict2_English_Users_Guide.chm
.chm
aDDict2_Magyar_Felhasznaloi_Kezikonyv.chm
.chm
addict2.nfo
bass.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetEAXMix
BASS_ChannelGetInfo
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelResume
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetLength
BASS_MusicGetName
BASS_MusicGetVolume
BASS_MusicLoad
BASS_MusicPlay
BASS_MusicPlayEx
BASS_MusicPreBuf
BASS_MusicSetAmplify
BASS_MusicSetPanSep
BASS_MusicSetPositionScaler
BASS_MusicSetVolume
BASS_Pause
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SamplePlay
BASS_SamplePlay3D
BASS_SamplePlay3DEx
BASS_SamplePlayEx
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamGetLength
BASS_StreamGetTags
BASS_StreamPlay
BASS_StreamPreBuf
BASS_Update
_

Sections

Size: 90KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cns.nfo
licence.txt
text.txt

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 332KB

UPX1 Size: 10KB - Virtual size: 12KB

UPX2 Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Sections

 Size: 10KB - Virtual size: 632KB

Headers

File Characteristics

Sections

 Size: 9KB - Virtual size: 440KB

Headers

File Characteristics

Sections

 Size: 14KB - Virtual size: 416KB

Headers

File Characteristics

Sections

 Size: 9KB - Virtual size: 368KB

Headers

File Characteristics

Sections

 Size: 16KB - Virtual size: 3.0MB

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 320KB

UPX1 Size: 10KB - Virtual size: 12KB

UPX2 Size: 512B - Virtual size: 4KB

ad03cf29484731f953d2774a7eedb3d9

Headers

File Characteristics

Imports

winmm

glu32

opengl32

kernel32

user32

gdi32

ole32

oleaut32

dsound

msvcrt

bass

Sections

.text Size: 560KB - Virtual size: 556KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 2.2MB - Virtual size: 7.0MB

.rsrc Size: 4KB - Virtual size: 3KB

Headers

File Characteristics

Exports

Exports

Sections

Size: 90KB - Virtual size: 292KB

.rsrc Size: 568B - Virtual size: 4KB

Size: - Virtual size: 8KB

Size: 4KB - Virtual size: 3KB

UPX0
Size: - Virtual size: 332KB

UPX1
Size: 10KB - Virtual size: 12KB

UPX2
Size: 512B - Virtual size: 4KB

Size: 10KB - Virtual size: 632KB

Size: 9KB - Virtual size: 440KB

Size: 14KB - Virtual size: 416KB

Size: 9KB - Virtual size: 368KB

Size: 16KB - Virtual size: 3.0MB

UPX0
Size: - Virtual size: 320KB

UPX1
Size: 10KB - Virtual size: 12KB

UPX2
Size: 512B - Virtual size: 4KB

.text
Size: 560KB - Virtual size: 556KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 2.2MB - Virtual size: 7.0MB

.rsrc
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 568B - Virtual size: 4KB