e9d1eb963bb4ed6c2ccc3da84376064e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e9d1eb963bb4ed6c2ccc3da84376064e_JaffaCakes118
Size

160KB
MD5

e9d1eb963bb4ed6c2ccc3da84376064e
SHA1

e1bfa36dcafc298faed6d8b1fecbc67745e7d234
SHA256

d518a8f311d6994fec567c3470ae1ff59f9509e72bc475181fc782d3f1ee6816
SHA512

b81cf66324d0a0b51d9f063251b55eea95b519e660b0306eca285a5e70a0c5ff349e64baef0730d519e1b031c1f02e991dee50d749b8f89c1ec47db3810f7bdb
SSDEEP

3072:2dBrKOtlNDfHMYH7Fc7wbtozYHKZqc32eVbk6vcQeewQeeyQeesQee71QeefQeeM:2d59IE3+bcQeewQeeyQeesQee71Qeef1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9d1eb963bb4ed6c2ccc3da84376064e_JaffaCakes118

Files

e9d1eb963bb4ed6c2ccc3da84376064e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3f7c53707c1f4a9609de22a1549f901b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA
IsDBCSLeadByte
GetVersionExA
IsProcessorFeaturePresent

c3_core_dll

?Phy_SetFrame@@YAXPAUC3Phy@@K@Z
?Phy_ChangeTexture@@YAXPAUC3Phy@@H@Z
?Phy_ChangeMixTexture@@YAXPAUC3Phy@@H@Z
?Common_CloseRes@@YAXPAX@Z
?Motion_Load@@YAHPAPAUC3Motion@@PAX@Z
?Common_GetChunk@@YAXPAXPAUChunkHeader@@@Z
?Phy_Load@@YAHPAPAUC3Phy@@PAXHHHH@Z
?Common_SeekRes@@YAXPAXHH@Z
?Common_GetSeek@@YAJPAX@Z
?Common_OpenRes@@YAPAXPBDAAKH@Z
?Phy_DrawNormal@@YAHPAUC3Phy@@U_D3DMATERIAL8@@PAU_D3DXMATRIXA16@@HKKHM@Z
?Phy_Calculate@@YAHPAUC3Phy@@HHUD3DXVECTOR3@@@Z
?IntersectTriangle@@YAHABUD3DXVECTOR3@@0000AAU1@@Z
?Motion_GetMatrix@@YAXPAUC3Motion@@KPAU_D3DXMATRIXA16@@@Z
?SMotion_Load@@YAHPAPAUC3SMotion@@PAX@Z
?SMotion_Unload@@YAXPAPAUC3SMotion@@@Z
?Ptcl_Load@@YAHPAPAUC3PtclEx@@PAXH@Z
?Ptcl_Unload@@YAXPAPAUC3PtclEx@@@Z
?Ptcl_Load@@YAHPAPAUC3Ptcl@@PAXH@Z
?Ptcl_Unload@@YAXPAPAUC3Ptcl@@@Z
?Shape_Load@@YAHPAPAUC3Shape@@PAXH@Z
?Shape_Unload@@YAXPAPAUC3Shape@@@Z
?Motion_Unload@@YAXPAPAUC3Motion@@@Z
?Phy_SetColor@@YAXPAUC3Phy@@MMMM@Z
?Phy_ClearMatrix@@YAXPAUC3Phy@@@Z
?Phy_SetStepCount@@YAXPAUC3Phy@@K@Z
?Phy_Muliply@@YAXPAUC3Phy@@HPAU_D3DXMATRIXA16@@@Z
?Phy_Prepare@@YAXXZ
?Ptcl_ClearMatrix@@YAXPAUC3PtclEx@@@Z
?Ptcl_Draw@@YAHPAUC3PtclEx@@KK@Z
?Ptcl_Muliply@@YAXPAUC3PtclEx@@PAUD3DXMATRIX@@@Z
?Ptcl_NextFrame@@YAXPAUC3Ptcl@@H@Z
?Ptcl_ClearMatrix@@YAXPAUC3Ptcl@@@Z
?Ptcl_Draw@@YAHPAUC3Ptcl@@KK@Z
?Ptcl_Muliply@@YAXPAUC3Ptcl@@PAUD3DXMATRIX@@@Z
?Ptcl_Prepare@@YAXXZ
?Shape_ClearMatrix@@YAXPAUC3Shape@@@Z
?Shape_Draw@@YAHPAUC3Shape@@H@Z
?Shape_Muliply@@YAXPAUC3Shape@@PAUD3DXMATRIX@@@Z
?Shape_Prepare@@YAXKK@Z
?Common_Translate@@YAXPAUD3DXMATRIX@@MMM@Z
?Common_Rotate@@YAXPAUD3DXMATRIX@@MMM@Z
?Common_Scale@@YAXPAUD3DXMATRIX@@MMM@Z
?Ptcl_SetFrame@@YAXPAUC3Ptcl@@K@Z
?Ptcl_SetFrame@@YAXPAUC3PtclEx@@K@Z
?Phy_Unload@@YAXPAPAUC3Phy@@@Z
?Ptcl_CreateInfo@@YAPAV?$map@HUPTCL_MATRIX@@U?$less@H@std@@V?$allocator@UPTCL_MATRIX@@@3@@std@@H@Z
?Ptcl_DestroyInfo@@YAXPAV?$map@HUPTCL_MATRIX@@U?$less@H@std@@V?$allocator@UPTCL_MATRIX@@@3@@std@@@Z
?Common_ReadRes@@YAKPAX0K@Z
?Sprite_Unload@@YAXPAPAUC3Sprite@@@Z
?Sprite_Load@@YAHPAPAUC3Sprite@@PBDW4_D3DPOOL@@HKHH@Z
?Sprite_Draw@@YAHPAUC3Sprite@@K@Z
?Sprite_SetCoor@@YAXPAUC3Sprite@@PAUtagRECT@@HHKK@Z
?Sprite_SetColor@@YAXPAUC3Sprite@@EEEE@Z
?Sprite_Rotate@@YAXPAUC3Sprite@@H@Z
?Sprite_ReLoadNoFilter@@YAHPAPAUC3Sprite@@PADW4_D3DPOOL@@HK@Z
?Sprite_Unlock@@YAHPAUC3Sprite@@@Z
?Sprite_Lock@@YAHPAUC3Sprite@@PAUtagRECT@@PAU_D3DLOCKED_RECT@@@Z
?Sprite_Create@@YAHPAPAUC3Sprite@@KKKW4_D3DFORMAT@@W4_D3DPOOL@@@Z
?Camera_Clear@@YAXPAUC3Camera@@@Z
?Camera_BuildOrtho@@YAHPAUC3Camera@@MMH@Z
?Camera_BuildProject@@YAHPAUC3Camera@@H@Z
?Camera_BuildView@@YAHPAUC3Camera@@H@Z
?Phy_SetLight@@YAXHMMMKKM@Z
?Font_Release@@YAXPAPAUC3Font@@@Z
?Font_Create@@YAHPAPAUC3Font@@PBDH@Z
?Font_CheckPixel@@YAHPAUC3Font@@PBDK@Z
?Font_DrawEnd@@YA_NXZ
?Font_Prepare@@YAXXZ
?Font_Draw@@YAHPAUC3Font@@MMKPBD@Z
?Font_DrawBegin@@YAXXZ
?SetTextureStageState@@YAXKW4_D3DTEXTURESTAGESTATETYPE@@K@Z
?SetRenderState@@YAXW4_D3DRENDERSTATETYPE@@K@Z
?g_D3DDevice@@3PAUIDirect3DDevice8@@A
?Init3D@@YAHPAUHINSTANCE__@@PBDKKHP6GJPAUHWND__@@IIJ@ZK@Z
?Init3DEx@@YAHPAUHWND__@@KKHK@Z
?Quit3D@@YAXXZ
?IfDeviceLost@@YAHXZ
?ResetDevice@@YAHXZ
?Begin3D@@YAHXZ
?End3D@@YAHXZ
?g_dwTriTotal@@3KA
?ClearBuffer@@YAHHHK@Z
?Flip@@YAHPBUtagRECT@@0PAUHWND__@@@Z
?Sprite_Prepare@@YAXXZ
?CalcRate@@YAKXZ
?CapScreen@@YAXPAD@Z
?DataFile_Open@@YAXPBD@Z
?DataFile_Close@@YAXXZ
?Motion_GetMatrix_Blend@@YAXUC3MotionTracker@@KPAU_D3DXMATRIXA16@@@Z
?g_Viewport@@3U_D3DVIEWPORT8@@A
?g_ProjectMatrix@@3UD3DXMATRIX@@A
?g_ViewMatrix@@3UD3DXMATRIX@@A
?Shape_SetFrame@@YAXPAUC3Shape@@K@Z
?Texture_Create@@YAHPAPAUC3Texture@@KKKW4_D3DFORMAT@@W4_D3DPOOL@@KH@Z
?Texture_Unload@@YAXPAPAUC3Texture@@@Z
?Texture_Load@@YAHPAPAUC3Texture@@PBDKW4_D3DPOOL@@HKKHH@Z
?Texture_ChangeSize@@YA_NPAUC3Texture@@KK@Z
?Texture_Reload@@YA_NPAUC3Texture@@KW4_D3DPOOL@@KK@Z
?Phy_NextFrame@@YAXPAUC3Phy@@H@Z
?Phy_SetBlendFrame@@YAXPAUC3Phy@@K@Z
?Phy_Draw@@YAHPAUPhyOutVertex@@KPAUC3Texture@@PBU_D3DMATERIAL8@@KKHH@Z

msvcp60

??1_Lockit@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?copy@?$char_traits@D@std@@SAPADPADPBDI@Z
?capacity@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0_Lockit@std@@QAE@XZ

msvcrt

fprintf
ctime
_mkdir
vsprintf
__dllonexit
localtime
_initterm
_adjust_fdiv
_purecall
??2@YAPAXI@Z
__CxxFrameHandler
time
strncpy
atoi
fread
_ftol
strstr
memmove
fopen
fgets
sscanf
strchr
fscanf
sprintf
fclose
malloc
_onexit
free
_strupr
_filelength
_fileno
_stricmp
_CIacos
_finite

winmm

timeGetTime

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

Exports

Exports

??0CMyBitmap@@QAE@ABV0@@Z
??0CMyBitmap@@QAE@XZ
??4CMyBitmap@@QAEAAV0@ABV0@@Z
??_7CMyBitmap@@6B@
?Begin3D@CMyBitmap@@SAHXZ
?CalcRate@CMyBitmap@@SAKXZ
?CheckStringPixels@CMyBitmap@@SA_NPBDK0H@Z
?ClearBuffer@CMyBitmap@@SAHHHK@Z
?Common_Rotate@CMyBitmap@@SAXPAUD3DXMATRIX@@MMM@Z
?Common_Scale@CMyBitmap@@SAXPAUD3DXMATRIX@@MMM@Z
?Common_Translate@CMyBitmap@@SAXPAUD3DXMATRIX@@MMM@Z
?End3D@CMyBitmap@@SAHXZ
?Flip@CMyBitmap@@SAHPBUtagRECT@@0PAUHWND__@@@Z
?FontDrawBegin@CMyBitmap@@SAXXZ
?FontDrawEnd@CMyBitmap@@SAXXZ
?FreeDataBuf@CMyBitmap@@SAXPAK@Z
?GameCameraBuild@CMyBitmap@@SAXUCMySize@@@Z
?GameCameraBuild@CMyBitmap@@SAXXZ
?GameCameraCreate@CMyBitmap@@SAHXZ
?GameCameraDestroy@CMyBitmap@@SAXXZ
?GameCameraGetPos@CMyBitmap@@SAXAAM00K@Z
?GameCameraIsProject@CMyBitmap@@SAHXZ
?GameCameraMove@CMyBitmap@@SAXH@Z
?GameCameraRotate@CMyBitmap@@SAXH@Z
?GameCameraSet@CMyBitmap@@SAXMMMK@Z
?GameCameraSetFov@CMyBitmap@@SAXM@Z
?GameCameraSetType@CMyBitmap@@SAXH@Z
?GameCameraZoom@CMyBitmap@@SAXH@Z
?GameFontCreate@CMyBitmap@@SAHXZ
?GameFontDestroy@CMyBitmap@@SAXXZ
?GetFontSize@CMyBitmap@@SAKXZ
?GetFontSize@CMyBitmap@@SAXAAUCMySize@@@Z
?GetObliqueAngle@CMyBitmap@@SAHXZ
?GetScreenHeight@CMyBitmap@@SAHXZ
?GetScreenSize@CMyBitmap@@SAXAAH0@Z
?GetScreenWidth@CMyBitmap@@SAHXZ
?GetShowTriTotal@CMyBitmap@@SAKXZ
?GetStrShowLen@CMyBitmap@@SAHPBDHH@Z
?IfDeviceLost@CMyBitmap@@SAHXZ
?Init3D@CMyBitmap@@SAHPAUHINSTANCE__@@PBDKKHP6GJPAUHWND__@@IIJ@ZK@Z
?Init3DEx@CMyBitmap@@SAHPAUHWND__@@KKHK@Z
?IsDBCSLeadByte@CMyBitmap@@SA_NPBDH@Z
?Motion_GetMatrix@CMyBitmap@@SAXPAUC3Motion@@KPAU_D3DXMATRIXA16@@@Z
?Motion_GetMatrix_Blend@CMyBitmap@@SAXUC3MotionTracker@@KPAU_D3DXMATRIXA16@@@Z
?PackFileClose@CMyBitmap@@SAXXZ
?PackFileOpen@CMyBitmap@@SAXPBD@Z
?Prepare3DLine@CMyBitmap@@SAXXZ
?PrepareLine@CMyBitmap@@SAXXZ
?PrepareMixSprite@CMyBitmap@@SAXXZ
?PrepareModle@CMyBitmap@@SAXXZ
?PrepareSprite@CMyBitmap@@SAXXZ
?QueryDevice@CMyBitmap@@SAPAUIDirect3DDevice8@@XZ
?Quit3D@CMyBitmap@@SAXXZ
?ResetDevice@CMyBitmap@@SAXXZ
?ScrRayBuild@CMyBitmap@@SAXHHAAUD3DXVECTOR3@@0@Z
?ScreenShot@CMyBitmap@@SAXPBD@Z
?ScreenToWorld@CMyBitmap@@SAXHHAAM00@Z
?SetLight@CMyBitmap@@SAXHMMMKKM@Z
?Show3DBox@CMyBitmap@@SAXAAUD3DXVECTOR3@@0K@Z
?ShowBlock@CMyBitmap@@SAXHHHHK@Z
?ShowBlock@CMyBitmap@@SAXHHHHKKKK@Z
?ShowBlock@CMyBitmap@@SAXUCMyPos@@000K@Z
?ShowEmotionString@CMyBitmap@@SAHHHKPBDPAVIDataIcon@@KK0HH@Z
?ShowLine@CMyBitmap@@SAXHHHHK@Z
?ShowLine@CMyBitmap@@SAXPAULineVertex@1@K@Z
?ShowRect@CMyBitmap@@SAXHHHHK@Z
?ShowString@CMyBitmap@@SAXHHKPBD0HH@Z
?ShowTString@CMyBitmap@@SAXHHKPBDPADHH@Z
?WorldToScreen@CMyBitmap@@SAXMMMAAH0@Z
AniCreate
BmpCreate
DestroyPtclInfo
DestroyShapeInfo
EffectCreate
MeshCreate
MotionCreate
MotionMatrixGet
MultiBmpCreate
MultiRectCreate
MyBitmapCreate
PuzzelBlockCreate
PuzzelCellCreate
PuzzelTriangleCreate
Scene3DCreate
TargetBmpCreate
TextureCreate
TextureCreateEx

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f7c53707c1f4a9609de22a1549f901b

Headers

File Characteristics

Imports

kernel32

c3_core_dll

msvcp60

msvcrt

winmm

advapi32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 110KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 12KB - Virtual size: 15KB

.data1 Size: 4KB - Virtual size: 2KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 112KB - Virtual size: 110KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 12KB - Virtual size: 15KB

.data1
Size: 4KB - Virtual size: 2KB

.reloc
Size: 12KB - Virtual size: 8KB