009406b691dfb915db040fecd5f12563_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

009406b691dfb915db040fecd5f12563_JaffaCakes118
Size

517KB
MD5

009406b691dfb915db040fecd5f12563
SHA1

9df7a70cb34e488e414693608daa02733a5a6349
SHA256

8b3a8d745a7060404c183da9ac70994cdb58af1419d9202cd503030ef8c845ab
SHA512

4631ed203c7aa86c3dd6e61cc75831fc2be413cc75e4c4a7a621b738fd05f74a3d5832d002199c2ce653067d1e0986df215f1a0d51ed5820d0cc284e266c0cc4
SSDEEP

12288:UoT5OA/yR9/APSdOz0kunxL0bUuCeXSh3+ou1x:WA/yXAEOz+xobzDChg1x

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ty2wdb.pc6game/Chinese.vlp
unpack001/ty2wdb.pc6game/VirtuaNES.exe

Files

009406b691dfb915db040fecd5f12563_JaffaCakes118
.zip
ty2wdb.pc6game/CheatCode/Castlevania (E).gen
ty2wdb.pc6game/CheatCode/SpartanX.vct
ty2wdb.pc6game/CheatCode/Super Mario Bros (E).gen
ty2wdb.pc6game/Chinese.vlp
.dll windows:4 windows x86 arch:x86

b2e50cc60a521158b3ea2d099cbea42b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Exports

Exports

GetVlpLanguage
GetVlpLocaleID
GetVlpVersion

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ty2wdb.pc6game/Disksys.rom
ty2wdb.pc6game/Doc/AVIconv_E.txt
ty2wdb.pc6game/Doc/Cheat_E.txt
ty2wdb.pc6game/Doc/ExtSound_E.txt
ty2wdb.pc6game/Doc/History_E.txt
ty2wdb.pc6game/Doc/Mappers.txt
ty2wdb.pc6game/Doc/NetPlay_E.txt
ty2wdb.pc6game/Doc/Readme_E.txt
ty2wdb.pc6game/VirtuaNES.exe
.exe windows:4 windows x86 arch:x86

7647bdbefd6e10c04c4630fe9ea74a1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
SetEndOfFile
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
UnhandledExceptionFilter
WriteFile
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
ReadFile
IsBadWritePtr
FreeLibrary
GetLocalTime
HeapCreate
CompareStringW
HeapSize
HeapReAlloc
GetCurrentProcess
TerminateProcess
TlsGetValue
SetLastError
TlsAlloc
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
ExitThread
TlsSetValue
InterlockedIncrement
InterlockedDecrement
GetSystemTime
GetTimeZoneInformation
RaiseException
HeapFree
HeapAlloc
RtlUnwind
LeaveCriticalSection
DeleteCriticalSection
InterlockedExchange
InitializeCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetModuleFileNameA
CreateMutexA
GetLastError
ReleaseMutex
GetVersionExA
WritePrivateProfileStructA
WritePrivateProfileStringA
GetPrivateProfileStructA
GetPrivateProfileStringA
HeapDestroy
GetPrivateProfileIntA
FindClose
GetUserDefaultLCID
QueryPerformanceFrequency
CreateFileA
GetFileInformationByHandle
LoadLibraryA
GetProcAddress
GetTempPathA
DeleteFileA
lstrlenA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileA
FindNextFileA
CreateEventA
ResetEvent
SetEvent
SetThreadPriority
lstrcmpiA
Sleep
CreateThread
ResumeThread
TerminateThread
CreateDirectoryA
WaitForSingleObject
VirtualFree
CloseHandle
SetEnvironmentVariableA
VirtualAlloc
lstrcpyA

user32

SendDlgItemMessageA
LoadIconA
SendMessageA
DrawTextA
FindWindowA
UpdateWindow
TranslateMessage
DispatchMessageA
DeleteMenu
InsertMenuA
DrawEdge
CheckRadioButton
LoadCursorA
GetWindowLongA
DialogBoxParamA
IsDialogMessageA
SetWindowsHookExA
UnhookWindowsHookEx
OffsetRect
CallNextHookEx
InvertRect
FillRect
GetScrollInfo
SetScrollInfo
EnableMenuItem
GetMenuStringA
ModifyMenuA
GetDlgItem
GetMessageA
SetWindowPlacement
RedrawWindow
SetWindowLongA
GetDC
GetClientRect
IsWindow
SetCursor
PtInRect
CallWindowProcA
EndPaint
BeginPaint
EndDialog
LoadStringA
DefWindowProcA
GetWindowTextA
EnableWindow
SetWindowTextA
KillTimer
GetDlgItemTextA
MessageBoxA
wsprintfA
SetTimer
PostMessageA
CreateDialogParamA
SetDlgItemTextA
DestroyWindow
GetWindowRect
GetWindowTextLengthA
MessageBeep
IsWindowVisible
SetForegroundWindow
GetWindowPlacement
DrawMenuBar
PostQuitMessage
SetMenu
RegisterClassExA
CreateWindowExA
GetDlgItemInt
SetDlgItemInt
CheckMenuItem
GetMenuItemCount
GetMenuItemID
GetAsyncKeyState
GetCursorPos
ClientToScreen
SetRect
ReleaseDC
GetParent
TrackPopupMenu
CheckDlgButton
GetSystemMetrics
LoadMenuA
GetSubMenu
IsDlgButtonChecked
InvalidateRect
DestroyMenu
SetFocus
MoveWindow
ScreenToClient
SetWindowPos
ShowWindow
GetFocus

gdi32

CreateFontIndirectA
GetObjectA
SelectObject
DeleteObject
SetTextColor
SetBkMode
GetStockObject
SetBkColor
ExtTextOutA
CreatePalette
GetSystemPaletteEntries
RealizePalette
SelectPalette
AnimatePalette
StretchDIBits
TextOutA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumValueA
RegEnumKeyExA

shell32

DragFinish
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
DragAcceptFiles
DragQueryFileA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

comctl32

ord17
ord6
ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_LoadImageA

imm32

ImmAssociateContext

shlwapi

StrStrIA
StrCmpNIA
PathIsRelativeA
PathAppendA
PathCanonicalizeA
PathFindExtensionA
PathUnquoteSpacesA

avifil32

AVIStreamWrite
AVIStreamRelease
AVIFileRelease
AVIFileOpenA
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIStreamSetFormat
AVIFileExit
AVIFileInit

msvfw32

ICCompressorFree
ICCompressorChoose

wsock32

recv
WSACancelAsyncRequest
shutdown
socket
setsockopt
closesocket
htonl
htons
sendto
inet_ntoa
WSAAsyncSelect
listen
connect
WSAGetLastError
ioctlsocket
WSAAsyncGetHostByName
WSAStartup
WSACleanup
recvfrom
inet_addr
bind
send
accept

version

GetFileVersionInfoSizeA

Sections

.text
Size: 636KB - Virtual size: 635KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 991KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ty2wdb.pc6game/VirtuaNES.ini
ty2wdb.pc6game/game.ini
ty2wdb.pc6game/index.dat
ty2wdb.pc6game/ty2.nes
ty2wdb.pc6game/2޵а İ_2nes - pc6վ.url
.url

Sharing

General

Malware Config

Signatures

Files

b2e50cc60a521158b3ea2d099cbea42b

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 36KB - Virtual size: 32KB

.reloc Size: 4KB - Virtual size: 1KB

7647bdbefd6e10c04c4630fe9ea74a1c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

winmm

comctl32

imm32

shlwapi

avifil32

msvfw32

wsock32

version

Sections

.text Size: 636KB - Virtual size: 635KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 56KB - Virtual size: 991KB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 36KB - Virtual size: 32KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 636KB - Virtual size: 635KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 56KB - Virtual size: 991KB

.rsrc
Size: 8KB - Virtual size: 4KB