fd447c16afe1c3efec704a7c2ae758a5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fd447c16afe1c3efec704a7c2ae758a5_JaffaCakes118
Size

2.4MB
MD5

fd447c16afe1c3efec704a7c2ae758a5
SHA1

b080c74bc03ebb93305a6ec501ea74bfbd9944e8
SHA256

450b7be62c6bb1098c6e4ddb63ffa53b66f7a156cfe30691e1d17c5225977895
SHA512

ad609df173fe0083e66d07ed1ba9dcfbef91f2ea4302d0284ed35c60989f686027dbb926b863db931dfc4d1bc7c7e639a7684c1f2d69632ef7737857b5d06a30
SSDEEP

49152:9k6uz3jCOT8VRbXwBJaF4u1iL8TT2DqJmr3MASl9ofE:CUrAu9ofE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd447c16afe1c3efec704a7c2ae758a5_JaffaCakes118

Files

fd447c16afe1c3efec704a7c2ae758a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0aeb1e1770ab9082571c629c3cd800f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA

comctl32

CreateStatusWindowA
ImageList_Destroy
ImageList_Draw
ImageList_GetImageCount
ImageList_LoadImage
InitCommonControlsEx

crypt32

CertAddEncodedCertificateToStore
CertCloseStore
CertCreateCertificateContext
CertFreeCRLContext
CertGetIssuerCertificateFromStore
CertOpenStore
CertOpenSystemStoreA
CryptDecodeObject

ddraw

DirectDrawCreate

gdi32

BitBlt
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateDIBitmap
CreateFontIndirectA
CreatePatternBrush
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
GetStockObject
GetTextExtentPoint32A
PatBlt
SelectObject
SetBkColor
SetBkMode
SetBrushOrgEx
SetTextColor

gfxshared

??0rend_proc_t@@QAE@XZ
?buffer_destroy@r_device_t@@QAEXPAVr_buffer_t@@@Z
?device_count@r_driver_t@@QAEIXZ
?device_get@r_driver_t@@QAEPAVr_device_t@@I@Z
?gfx_shared_init@@YAXPAX@Z
?reset_stats@r_context_t@@QAEXXZ

inpshared

?inp_shared_init@@YAXPAX@Z

kernel32

CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexA
CreateProcessA
CreateSemaphoreA
CreateThread
DeleteCriticalSection
DeleteFileA
DuplicateHandle
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
ExitThread
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
FlushInstructionCache
FlushViewOfFile
FormatMessageA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetComputerNameA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetExitCodeThread
GetFileAttributesA
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetOverlappedResult
GetPrivateProfileIntA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetPrivateProfileStructA
GetProcAddress
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVolumeInformationA
GetVolumeInformationW
GetWindowsDirectoryA
GlobalAlloc
GlobalLock
GlobalMemoryStatus
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFileTimeToFileTime
LocalFree
MapViewOfFile
MoveFileA
MultiByteToWideChar
OpenEventA
OpenFile
OpenMutexA
OpenProcess
OutputDebugStringA
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryA
ResumeThread
RtlUnwind
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFileAttributesA
SetFilePointer
SetFileTime
LockResource
SetLastError
SetPriorityClass
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SuspendThread
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
_hread
_hwrite
_lclose
_lcreat
_llseek
_lopen
lstrcmp
lstrcpy
lstrcpyn
lstrcpynW
lstrlen
lstrlenW

netapi32

Netbios

ole32

CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoGetClassObject
CoInitialize
CoRegisterClassObject
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateStreamOnHGlobal
OleInitialize
OleLockRunning
OleUninitialize
StringFromCLSID

oleaut32

SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VariantClear
DispCallFunc
SysStringByteLen
SysAllocStringByteLen
LoadRegTypeLib

olepro32

OleCreateFontIndirect

p3shared

??0bmem_manager_t@@QAE@XZ
??0chunk_space_t@@QAE@I@Z
??0r_packet_t2@@QAE@XZ
??0r_packet_t@@QAE@XZ
??0text_parser_t@@QAE@XZ
??0vprocess_t@@QAE@H@Z
??1bmem_manager_t@@UAE@XZ
??1chunk_space_t@@QAE@XZ
??1dl_ops_t@@UAE@XZ
??1vprocess_t@@UAE@XZ
?add_object@def_pool_t@@QAEXPAVdef_obj_t@@@Z
?append@vdatalist_t@@QAEPAUvdatalist_node_t@@XZ
?append@vptrlist_t@@QAEPAUvptrlist_node_t@@PAX@Z
?clear@def_pool_t@@QAEXXZ
?error@vprocess_t@@QAAXPBDZZ
?find@def_pool_t@@QBEPAVdef_obj_t@@PBDH_N@Z
?find_ptr@vptrlist_t@@QBEPAUvptrlist_node_t@@PBXPAU2@@Z
?free@r_packet_t2@@QAEXXZ
?free@r_proto_t@@QAEXXZ
?get@id_sys_t@@QAEHH@Z
?get_bool@def_obj_t@@QAE_NPBDH@Z
?get_current_time_slow@vtimer_t@@IBENXZ
?get_data@id_sys_t@@QAEPAXH@Z
?get_size@material_t@@QAE_NPAI00@Z
?get_value@def_obj_t@@QAEPBDPBDH@Z
?init_mm@vdatalist_t@@QAEXIIPAVbmem_manager_t@@@Z
?insert@chunk_space_t@@QAEPAUvdatalist_node_t@@PBXI@Z
?insert@vdatalist_t@@QAEPAUvdatalist_node_t@@XZ
?insert@vptrlist_t@@QAEPAUvptrlist_node_t@@PAU2@PAX@Z
?insert@vptrlist_t@@QAEPAUvptrlist_node_t@@PAX@Z
?is_read_only@cvar_t@@QAE_NXZ
?link@cvar_t@@QAEXPAV1@@Z
?lock@vprocess_t@@QAEXXZ
?message@vprocess_t@@QAAXPBDZZ
?new_object@def_pool_t@@QAEPAVdef_obj_t@@PBDH@Z
?open@mbio_t@@QAEHPAXI@Z
?p3shared_init@@YAXPAX@Z
?p3shared_shutdown@@YAXXZ
?p3shared_startup@@YAXXZ
?print@cvar_t@@QAEXXZ
?read_line@text_parser_t@@QAEIPADI@Z
?release@id_sys_t@@QAEXH@Z
?remove@chunk_space_t@@QAE_NPAUvdatalist_node_t@@@Z
?remove_all@vdatalist_t@@QAEXXZ
?remove_pos@vdatalist_t@@QAEXPAUvdatalist_node_t@@@Z
?remove_pos@vptrlist_t@@QAEPAXPAUvptrlist_node_t@@@Z
?reset@cvar_t@@QAEXXZ
?separate@arg_t@@QAE_NPBDDH_N1@Z
?set@cvar_t@@QAE_NPBD@Z
?set_bool@def_obj_t@@QAEXPBD_NH@Z
?set_buffer@text_parser_t@@QAEXPBXI@Z
?set_data@id_sys_t@@QAEXHPAX@Z
?set_ipacket@r_proto_t@@QAEXPAVr_packet_t@@@Z
?set_material@r_proto_t@@QAEXPAVc_item_t@@@Z
?set_name@vprocess_t@@QAEXPBD@Z
?set_pars@bmem_manager_t@@QAEXIH@Z
?set_usec@vtimer_t@@QAEX_K@Z
?set_value@def_obj_t@@QAEXPBD0H@Z
?set_vpacket@r_proto_t@@QAEXIPAVr_packet_t@@@Z
?shutdown@vprocess_t@@UAEX_N@Z
?sort@vdatalist_t@@QAEXP6AHPBX0@Z@Z
?store@cvar_t@@QAE_NPAX@Z
??1dl_ops_t@@UAE@XZ
?tell@mbio_t@@QAEPAXXZ
?tinsert@vdatalist_t@@QAEXPAUvdatalist_node_t@@@Z
?tremove_pos@vdatalist_t@@QAEXPAUvdatalist_node_t@@@Z
?unlink@cvar_t@@QAEXXZ
?unlock@vprocess_t@@QAEXXZ
??1dl_ops_t@@UAE@XZ
?update@vprocess_t@@QAEXN@Z
?v_atof@@YAMPBD@Z
?v_atoi@@YAHPBD@Z
?v_fnsplit@@YAXPBDPAD11@Z
?v_snprintf0@@YAHPADIPBDZZ
?v_snprintf@@YAHPADIPBDZZ
?v_stpcpy@@YAPADPADPBD@Z
?v_stpncpy@@YAPADPADPBDI@Z
?v_strdup@@YAPADPBD@Z
?v_strncpy@@YAXPADPBDI@Z
?v_vsnprintf@@YAHPADIPBD0@Z
?vfs_plain_load@@YAPAXPAVc_item_t@@@Z
?write@mbio_t@@QAEPAXPBXI@Z
matrix_set_identity
mm_memcpy
p3d_get_cpu_speed

shell32

ExtractIconA
ShellExecuteA

sndshared

??0snd_proc_t@@QAE@XZ
?snd_shared_init@@YAXPAX@Z

urlmon

CoInternetGetSession

user32

AdjustWindowRectEx
AttachThreadInput
BeginPaint
CallNextHookEx
CallWindowProcA
ChangeDisplaySettingsA
CharLowerA
CharNextA
CheckDlgButton
ClientToScreen
CloseWindow
CreateAcceleratorTableA
CreateIconFromResource
CreateIconFromResourceEx
CreateWindowExA
CreateWindowExW
DefWindowProcA
DestroyCursor
DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
DispatchMessageA
DrawEdge
DrawFrameControl
DrawTextA
EnableWindow
EndDialog
EndPaint
EnumChildWindows
EnumDisplaySettingsA
EnumWindows
FillRect
FrameRect
GetActiveWindow
GetAsyncKeyState
GetClassInfoExA
GetClassNameA
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetFocus
GetForegroundWindow
GetKeyState
GetKeyboardState
GetMenuItemCount
GetMenuItemInfoA
GetMessageA
GetMessagePos
GetParent
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowThreadProcessId
InflateRect
InvalidateRect
InvalidateRgn
IsChild
IsDlgButtonChecked
IsMenu
IsWindow
IsWindowEnabled
IsWindowVisible
KillTimer
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadImageA
LoadImageW
LoadMenuA
LoadStringA
LoadStringW
MapWindowPoints
MessageBeep
MessageBoxA
ModifyMenuA
MoveWindow
OffsetRect
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassA
RegisterClassExA
RegisterHotKey
RegisterClipboardFormatA
ReleaseCapture
ReleaseDC
ScreenToClient
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetCapture
SetCursorPos
SetFocus
SetForegroundWindow
SetMenuDefaultItem
SetMenuItemInfoA
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowCursor
ShowWindow
SystemParametersInfoA
TrackPopupMenuEx
TranslateAccelerator
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterHotKey
UpdateWindow
WindowFromPoint
wsprintfA
wvsprintfA

wininet

HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetCrackUrlA
InternetOpenA
InternetQueryOptionA
InternetSetOptionA

winmm

PlaySound
PlaySoundW
mciSendCommandA
mciSendCommandW
mciSendStringA
mmioClose
mmioOpenA
mmioOpenW
mmioRead
mmioSeek
mmioWrite
sndPlaySoundA
sndPlaySoundW
timeBeginPeriod
timeEndPeriod
timeGetTime
timeSetEvent

wsock32

bind
closesocket
getsockopt
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
htons
recvfrom
sendto
setsockopt
socket
WSAGetLastError
WSACleanup

zlib1

inflate
inflateEnd
inflateInit2_
inflateReset
zlibVersion

Exports

Exports

?snd_obstrucion@@YAXPAXM@Z
_cdl_param
_cmd_execute_block
_cvar_register_variable
_gfx_sprite
_inp_bind_command
_inp_bind_impulse
_inp_get_impulse_code
_inp_get_impulse_name
_inp_get_trigger_code
_inp_get_trigger_name
_inp_joy_set_dead_zone
_inp_name_impulse
_inp_restore_bindings
_inp_search_trigger_command
_inp_search_trigger_impulse
_inp_unbind_impulse
_snd_enable_tag
_snd_new
_snd_new_i
_snd_precache
_vfs_mkdir
_vfs_mount_device
_vfs_open
cdl_argc
cdl_argv
ci_add_child
ci_alloc_mem_fix
ci_dec_refs
ci_free_mem
ci_free_mem_unfix
ci_get_name
ci_get_parent
ci_hwlru_add
ci_hwlru_move_to_start
ci_hwlru_remove
ci_inc_refs
ci_makeup_ops
ci_mlru_add
ci_mlru_move_to_start
ci_mlru_remove
ci_precache_remove
ci_remove_child
ci_set_alias
ci_set_name
citem_gen_destroy
citem_gen_hw_free
citem_gen_hw_load
citem_gen_mem_free
citem_gen_mem_init
citem_gen_mem_load
citem_gen_mem_move
cmd_add
cmd_argc
cmd_argv
cmd_execute
cmd_get
cmd_get_list
cmd_register_command
cmd_unregister_command
cvar_get
cvar_get_list
cvar_link
dll_handle
dll_register
dll_register_and_execute
error
error_proc
from_vfs_copy
gfx_alloc_packet
gfx_alloc_packet_2
gfx_alloc_proto
gfx_alpha_func
gfx_available_path
gfx_available_path_count
gfx_begin_frame
gfx_begin_statechange
gfx_begin_update
gfx_bitmap
gfx_blend_color
gfx_blend_func
gfx_cache_alloc
gfx_cache_data
gfx_cache_pop
gfx_cache_push
gfx_cache_sweep
gfx_clear
gfx_clear_color
gfx_clear_depth
gfx_color_mask
gfx_color_material
gfx_context_copy
gfx_cull_mode
gfx_depth_func
gfx_depth_mask
gfx_depth_offset
gfx_depth_range
gfx_desktop_res
gfx_device_count
gfx_device_get
gfx_device_get_hw_state
gfx_device_init
gfx_device_shutdown
gfx_disable
gfx_draw
gfx_drawable_begin_update
gfx_drawable_context
gfx_drawable_create
gfx_drawable_destroy
gfx_drawable_end_update
gfx_drawable_get_size
gfx_driver_count
gfx_driver_get
gfx_driver_name
gfx_driver_register
gfx_driver_unregister
gfx_enable
gfx_end_frame
gfx_end_statechange
gfx_end_update
gfx_fbuffer_create
gfx_fbuffer_destroy
gfx_flush
gfx_fog
gfx_free_packet
gfx_free_packet_2
gfx_free_proto
gfx_front_face
gfx_get_device
gfx_get_image
gfx_get_path
gfx_get_stats
gfx_get_stats_cur
gfx_get_surface_object
gfx_get_time
gfx_get_window_size
gfx_hw_flush
gfx_hw_free
gfx_hw_load
gfx_index_stream
gfx_init_devices
gfx_is_active
gfx_is_path_available
gfx_light
gfx_light_model_color
gfx_line_plain
gfx_line_strip
gfx_material
gfx_matrix_identity
gfx_matrix_load
gfx_mode_count
gfx_mode_current
gfx_mode_get
gfx_mode_init
gfx_mode_shutdown
gfx_pixelformat_choose
gfx_polygon_mode
gfx_query
gfx_render_pool
gfx_reset_state
gfx_reset_stats
gfx_screen_capture
gfx_set_active
gfx_set_gamma
gfx_set_time
gfx_set_win_properties
gfx_shutdown_devices
gfx_sub_bitmap
gfx_suggest_format
gfx_swapbuffers
gfx_texel_offset
gfx_texgen
gfx_texgen_plane
gfx_texture_const
gfx_texture_const_block
gfx_texture_object
gfx_texture_shader
gfx_try_capture
gfx_validate_method
gfx_vertex_const
gfx_vertex_const_block
gfx_vertex_shader
gfx_vertex_stream
gfx_viewport
hw_device_count
hw_device_get
hw_device_insert
hw_device_remove
hw_init
hw_revive
hw_shutdown
hw_suspend
inp_cursor_info
inp_cursor_info_set
inp_event
inp_fetch_keycode
inp_force_change
inp_force_create
inp_force_destroy
inp_force_play
inp_force_stop
inp_freeze_input
inp_get_mouse_sensitivity
inp_handle_impulses
inp_impulse_is_activated
inp_impulse_value
inp_init_devices
inp_init_input
inp_is_active
inp_joy_get_axis_name
inp_joy_get_count
inp_joy_get_dead_zone
inp_joy_get_name
inp_joy_switch
inp_mouse_reports_delta
inp_set_active
inp_set_mouse_reports_delta
inp_set_mouse_sensitivity
inp_shutdown_devices
inp_store_bindings
inp_thaw_input
inp_unbind_command
mem_info
mem_sys_alloc
mem_sys_calloc
mem_sys_free
mem_sys_realloc
message
message_history
message_history_count
message_proc
mm_add_mem_pool
mm_alloc_mem
mm_child_remove_ops
mm_free_mem
mm_get_hwdevice
mm_get_hwdevice_data
mm_get_hwtype
mm_get_resource
mm_get_resource_fld
mm_hw_free_all
mm_hw_free_all_ops
mm_hw_free_unreferenced
mm_hw_free_unreferenced_ops
mm_hwlru_free_last
mm_integrity
mm_map
mm_map_fld
mm_mem_free_all
mm_mem_free_all_ops
mm_mem_free_unreferenced
mm_mem_free_unreferenced_ops
mm_modify_flags
mm_modify_flags_ops
mm_precache
mm_precache_fld
mm_register_hwdevice
mm_register_hwtype
mm_register_loader
mm_release_item
mm_remove_mem_pool
mm_remove_unreferenced
mm_remove_unreferenced_ops
mm_sys_get_new_anitem
mm_sys_get_new_item
mm_unregister_hwdevice
mm_unregister_hwtype
mm_unregister_loader
net_iface_add
net_iface_alloc
net_iface_bind
net_iface_connect
net_iface_create
net_iface_del
net_iface_destroy
net_iface_free
net_iface_get_address
net_iface_ioctl
net_iface_recv
net_iface_register
net_iface_saddr_alloc
net_iface_saddr_free
net_iface_send
net_iface_set
net_sock_alloc
net_sock_avail
net_sock_bind
net_sock_close
net_sock_connect
net_sock_free
net_sock_iface
net_sock_recv
net_sock_recvfrom
net_sock_sendtov
net_sock_sendv
oswindow_activate_main_window
oswindow_attach
oswindow_create
oswindow_destroy
oswindow_detach
oswindow_get_properties
oswindow_get_window
oswindow_hide
oswindow_hold_reactions
oswindow_init
oswindow_is_application_active
oswindow_main_window_pos
oswindow_process_message_queue
oswindow_set_properties
oswindow_show
oswindow_shutdown
process
process_add
process_get
process_hw_lock
process_hw_unlock
process_mm_lock
process_mm_unlock
process_pid_get
process_register_message_loop
process_sleep
process_store_cfg
process_terminate_all
process_wakeup
snd_absorption
snd_apply
snd_def_mm_distances
snd_delete
snd_device_count
snd_device_current
snd_device_get
snd_device_info
snd_device_revive
snd_device_select
snd_device_shutdown
snd_device_suspend
snd_direction
snd_disable_tag
snd_distance_factor
snd_distances
snd_dplaying
snd_eplaying
snd_eval_devicestring
snd_get_length
snd_get_msnd_mgr
snd_get_stream_length
snd_get_stream_length_sec
snd_get_stream_position
snd_get_stream_position_sec
snd_get_tag
snd_init_devices
snd_listener
snd_occlusion
snd_pause
snd_paused
snd_play
snd_playing
snd_position
snd_rate
snd_restart
snd_resume
snd_room_type
snd_set_current_tag
snd_set_stream_position
snd_set_tag
snd_shutdown_devices
snd_stop
snd_sys_apply
snd_sys_check_playlist
snd_sys_fill_sounds
snd_sys_get_hw_type
snd_sys_get_play_list
snd_sys_get_sound_ops
snd_sys_remove_sounds
snd_velocity
snd_volume
sndl_init
sndl_shutdown
strace
sys_frame
sys_get_lastdelta
sys_get_random_seed
sys_get_system_string
sys_get_time
sys_init
sys_pause
sys_rand
sys_shutdown
sys_startup
sys_version
tick
tmr_cycles_to_usec
tmr_get_cycles
tmr_read
to_vfs_copy
v_assert_fail
v_errno_addr
v_strerror
verbose
verbose_proc
vfs_close
vfs_copy
vfs_fstat
vfs_get_device_name
vfs_get_fallback_device
vfs_read
vfs_rename
vfs_reset_fallback_device
vfs_seek
vfs_set_fallback_device
vfs_stat
vfs_unlink
vfs_write
warning
warning_proc

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0aeb1e1770ab9082571c629c3cd800f8

Headers

File Characteristics

Imports

advapi32

comctl32

crypt32

ddraw

gdi32

gfxshared

inpshared

kernel32

netapi32

ole32

oleaut32

olepro32

p3shared

shell32

sndshared

urlmon

user32

wininet

winmm

wsock32

zlib1

Exports

Exports

Sections

.text Size: 124KB - Virtual size: 124KB

.rdata Size: 36KB - Virtual size: 36KB

.data Size: 248KB - Virtual size: 248KB

.rsrc Size: 8KB - Virtual size: 8KB

.bss Size: 1.4MB - Virtual size: 1.4MB

.idata Size: 16KB - Virtual size: 16KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 124KB - Virtual size: 124KB

.rdata
Size: 36KB - Virtual size: 36KB

.data
Size: 248KB - Virtual size: 248KB

.rsrc
Size: 8KB - Virtual size: 8KB

.bss
Size: 1.4MB - Virtual size: 1.4MB

.idata
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 8KB