df6d43f095a0174b5bb1a5a7284092e3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

df6d43f095a0174b5bb1a5a7284092e3_JaffaCakes118
Size

11.0MB
MD5

df6d43f095a0174b5bb1a5a7284092e3
SHA1

86edb9dd44091e53e02f1adc8686afb2f4c07a10
SHA256

9d35745911ecaa4ecd33073235eba31cf0cfbc0294c0cfa9bd79e8c8cda8ae63
SHA512

611440541e8a150a9adab30c355357cec80256cb75bc780f339c49b6e394e9b31e6932b09a41a05f118da39026aedc0ebf3a860ecc974b04182030632033f347
SSDEEP

196608:l/mw3IS2omFTKWFLkn5U06jWtndPQlw4CmXm+qYMsm5dbkzEF+hCV10t:swY6mFTKWs5dFPMPXmum80ACV1I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ZombieAttack2-DarkTime(full version).exe

Files

df6d43f095a0174b5bb1a5a7284092e3_JaffaCakes118
.rar
ZombieAttack2-DarkTime(full version).exe
.exe windows:4 windows x86 arch:x86

da04bae2a35a52864d370c29594424df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
log10
memcpy
fopen
fseek
fclose
_stricmp
strncpy
strlen
strcpy
sprintf
strcmp
strncmp
abs
sin
fabs
tan
cos
_filbuf
atan
pow
sqrt

kernel32

GetModuleHandleA
HeapCreate
GetTickCount
HeapDestroy
ExitProcess
GetModuleFileNameA
HeapFree
HeapAlloc
LoadLibraryA
GetProcAddress
Sleep
FreeLibrary
CreateThread
CloseHandle
GetCurrentThreadId
GetCurrentProcessId
InitializeCriticalSection
GetCommandLineA
CreateFileA
ReadFile
GetCurrentThread
GetThreadPriority
SetThreadPriority
QueryPerformanceFrequency
QueryPerformanceCounter
SetLastError
WriteFile
SetFilePointer
HeapReAlloc

comctl32

InitCommonControls
InitCommonControlsEx

user32

GetSystemMetrics
GetFocus
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
ClipCursor
ShowCursor
GetWindowRect
SetCursorPos
SetMenu
DestroyMenu
GetPropA
GetMenu
CallWindowProcA
CreateMenu
SetWindowLongA
SetPropA
AppendMenuA
SetRect
GetClientRect
SetWindowPos
GetDC
ReleaseDC
CreateWindowExA
PeekMessageA
TranslateMessage
DispatchMessageA
ShowWindow
SetWindowTextA
MoveWindow
FillRect
InvalidateRect
DestroyWindow
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
RegisterClassExA
SendMessageA
GetWindowTextLengthA
GetWindowTextA
GetWindowLongA
RemovePropA
GetParent
GetWindow
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadCursorA
RegisterClassA
AdjustWindowRect
GetActiveWindow
CreateAcceleratorTableA
MsgWaitForMultipleObjects
GetMessageA
TranslateAcceleratorA
LoadImageA
SetCursor
MapWindowPoints
SystemParametersInfoA
GetKeyState
SetCapture
PostMessageA
GetCursorPos
ReleaseCapture
EnumChildWindows
DefFrameProcA
SetFocus
IsChild
GetClassNameA

gdi32

GetDeviceCaps
GetStockObject
DeleteObject
CreateSolidBrush
CreatePen
SelectObject
DeleteDC
SetTextAlign
SetTextColor
SetPixelV
Rectangle
SetBkColor
SetROP2
SetBkMode

ole32

CoInitialize
RevokeDragDrop
CoCreateInstance

winmm

timeBeginPeriod
timeEndPeriod

Sections

.code
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 758B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
game.pak

Sharing

General

Malware Config

Signatures

Files

da04bae2a35a52864d370c29594424df

Headers

File Characteristics

Imports

msvcrt

kernel32

comctl32

user32

gdi32

ole32

winmm

Sections

.code Size: 75KB - Virtual size: 74KB

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 1024B - Virtual size: 758B

.data Size: 5KB - Virtual size: 355KB

.rsrc Size: 4KB - Virtual size: 4KB

.code
Size: 75KB - Virtual size: 74KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 1024B - Virtual size: 758B

.data
Size: 5KB - Virtual size: 355KB

.rsrc
Size: 4KB - Virtual size: 4KB