1562c0de84561aaeaf1211938e4f70f5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

1562c0de84561aaeaf1211938e4f70f5_JaffaCakes118
Size

6.4MB
MD5

1562c0de84561aaeaf1211938e4f70f5
SHA1

57c911222d51d5960af1d3c1ff4064a45b0e172a
SHA256

b63f139340caed452ef7963a126a2a6738bf48d82c6cef2f8679eda816593400
SHA512

e76848db2d28d2bc7f9218311936e24b9346ab72824c04d7c57b4a9d3c5cf049490ac85cc912795e5d067293deed660c01f00438e33f95fc866bab20624adfe1
SSDEEP

98304:XFhGHp8YNfiMDA8srn9JeNYV5RyqDjw6EMtnw38jYRIa3rHFajxyb/ZGx1u1tX:XFh+p8Cqnneuy+MWG8jba3rgMbRAon

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
1562c0de84561aaeaf1211938e4f70f5_JaffaCakes118
unpack001/GmIntrnt.dll
unpack001/ReflexiveArcade/RAW_003.wdt
unpack001/ReflexiveArcade/ReflexiveArcade.dll
unpack001/Warkanoid2.RWG
unpack001/Warkanoid2.exe

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

1562c0de84561aaeaf1211938e4f70f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GmIntrnt.dll
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 387KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ReflexiveArcade/Application.dat
ReflexiveArcade/Arcade.dat
ReflexiveArcade/Background.jpg
.jpg
ReflexiveArcade/RAW_002.wdt
ReflexiveArcade/RAW_003.wdt
.exe windows:4 windows x86 arch:x86

87cbea85bad063a4b5b6ee40ba9a6277

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringA
GetEnvironmentVariableA
CloseHandle
TerminateProcess
GetLastError
WaitForMultipleObjectsEx
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
ReadFile

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ReflexiveArcade/RAW_004.wdt
ReflexiveArcade/ReflexiveArcade.dll
.dll windows:4 windows x86 arch:x86

d3a52cf7a249fe140776f7b5c43c1566

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetActiveWindow
LoadCursorA
SetCursor
MessageBoxA
SetCursorPos
ClientToScreen
SetForegroundWindow
ShowWindow
SetTimer
KillTimer
GetCursorPos
GetDesktopWindow
SystemParametersInfoA
GetClientRect
ScreenToClient
CloseClipboard
SetClipboardData
RegisterClipboardFormatA
EmptyClipboard
OpenClipboard
GetClipboardData
WindowFromPoint
wsprintfA

kernel32

GetCurrentDirectoryA
SetCurrentDirectoryA
DeviceIoControl
CloseHandle
CreateFileA
GetShortPathNameA
GetModuleFileNameA
GetCurrentProcess
SizeofResource
LockResource
LoadResource
FindResourceA
GetVolumeInformationA
GetWindowsDirectoryA
GetComputerNameA
GetVersionExA
GetProcAddress
LoadLibraryA
GetLastError
OutputDebugStringA
GlobalUnlock
GlobalLock
GlobalAlloc
SetPriorityClass
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetOEMCP
GetACP
GetCPInfo
GetTickCount
GetTempPathA
CreateProcessA
GetExitCodeProcess
IsBadReadPtr
IsBadWritePtr
MulDiv
CreateMutexA
WaitForSingleObject
ReleaseMutex
FileTimeToDosDateTime
GetSystemTimeAsFileTime
FindClose
FindFirstFileA
GetTempFileNameA
GetFileAttributesA
CreateDirectoryA
FindNextFileA
CompareFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
FileTimeToLocalFileTime
GetPrivateProfileIntA
WritePrivateProfileStringA
GetVersion
SetFileAttributesA
QueryPerformanceCounter
QueryPerformanceFrequency
FreeLibrary
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
GlobalSize
GetCommandLineA
DeleteFileA
SetEndOfFile
InterlockedDecrement
InterlockedIncrement
RtlUnwind
HeapReAlloc
HeapSize
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
WriteFile
lstrlenA
SetFilePointer
LocalFree
FormatMessageA
ReadFile
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
RaiseException
GetStringTypeA
GetStringTypeW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumValueA
RegEnumKeyExA
RegCreateKeyA
RegSetValueExA
GetUserNameA

gdi32

DeleteObject

shell32

ShellExecuteA

Exports

Exports

radll_DrawNextFrameIntoBuffer
radll_EnableWindowsMouseCursor
radll_EnterMenuSession
radll_GetDLLVersionAsInt
radll_GetDLLVersionAsString
radll_GetLastErrorInformation
radll_GetNumberOfRectsToUpdate
radll_GetUnlockCode
radll_GetUpdateRect
radll_GetValueAsFloat
radll_GetValueAsInt
radll_GetValueAsString
radll_HandleWindowsMessage
radll_HasTheProductBeenPurchased
radll_Initialize
radll_IsASystemUpdateRequired
radll_IsTheMenuSessionComplete
radll_SetMousePosition
radll_SetPalette
radll_ShutDown
unittest_DecryptBase32to10
unittest_DecryptUnlockCode
unittest_DegenerateProductID
unittest_GenerateNonZeroBaseNineString
unittest_GenerateNumberFromNonZeroBaseNineString
unittest_GenerateProductID
unittest_GenerateSubIDforString
unittest_GetBrandedApplicationID
unittest_GetBrandedKeyRevision
unittest_GetLocalHardwareID
unittest_ObfuscateString
unittest_UnobfuscateString
unittest_ValidateRegCode
unittest_ValidateUnlockCode

Sections

.text
Size: 720KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ReflexiveArcade/button_hover.jpg
.jpg
ReflexiveArcade/button_normal.jpg
.jpg
ReflexiveArcade/button_pressed.jpg
.jpg
Resource/Fonts/Minnie.TTF
Resource/MIDI/Message_1.mid
Resource/MIDI/Message_10.mid
Resource/MIDI/Message_11.mid
Resource/MIDI/Message_2.mid
Resource/MIDI/Message_27.mid
Resource/MIDI/Message_3.mid
Resource/MIDI/Message_7.mid
Resource/MIDI/Message_8.mid
Resource/MIDI/Message_9.mid
Resource/MIDI/NWarkanoid#01.mid
Resource/MIDI/NWarkanoid#02.mid
Resource/MIDI/NWarkanoid#02.xmi
Resource/MIDI/NWarkanoid#03.mid
Resource/MIDI/NWarkanoid#04.mid
Resource/MIDI/NWarkanoid#05.mid
Resource/MIDI/NWarkanoid#06.mid
Resource/MIDI/NWarkanoid#07.mid
Resource/MIDI/NWarkanoid#08.mid
Resource/MIDI/NWarkanoid#09.mid
Resource/MIDI/NWarkanoid#10.mid
Resource/MIDI/NWarkanoid#11.mid
Resource/MIDI/NWarkanoid#12.mid
Resource/MIDI/NWarkanoid#13.mid
Resource/MIDI/NWarkanoid#14.mid
Resource/MIDI/NWarkanoid#15.mid
Resource/MIDI/NWarkanoid#16.mid
Resource/MIDI/NWarkanoid#17.mid
Resource/MIDI/NWarkanoid#18.mid
Resource/MIDI/NWarkanoid#19.mid
Resource/MIDI/NWarkanoid#20.mid
Resource/MIDI/NWarkanoid#21.mid
Resource/MIDI/NWarkanoid#22.mid
Resource/MIDI/NWarkanoid#23.mid
Resource/MIDI/NWarkanoid#24.mid
Resource/MIDI/NWarkanoid#25.mid
Resource/MIDI/NWarkanoid#26.mid
Resource/MIDI/NWarkanoid#27.mid
Resource/MIDI/NWarkanoid#28.mid
Resource/MIDI/NWarkanoid#29.mid
Resource/MIDI/NWarkanoid#30.mid
Resource/MIDI/War3#01.mid
Resource/MIDI/War3#02.mid
Resource/MIDI/War3#04.mid
Resource/MIDI/War3#05.mid
Resource/MIDI/War3#06.mid
Resource/MIDI/War3#07.mid
Resource/MIDI/War3#08.mid
Resource/MIDI/War3#10.mid
Resource/MIDI/War3#11.mid
Resource/MIDI/War3#12.mid
Resource/MIDI/War3#13.mid
Resource/MIDI/War3#14.mid
Resource/MIDI/War3#15.mid
Resource/MIDI/War3#16.mid
Resource/MIDI/War3#17.mid
Resource/MIDI/War3#18.mid
Resource/MIDI/War3#27.mid
Resource/MIDI/War3#28.mid
Resource/MIDI/War3#29.mid
Resource/MIDI/War3#30.mid
Resource/MIDI/War3#31.mid
Resource/MIDI/War3#32.mid
Resource/MIDI/Warkanoid#01.mid
Resource/MIDI/Warkanoid#02.mid
Resource/MIDI/Warkanoid#03.mid
Resource/MIDI/Warkanoid#04.mid
Resource/MIDI/Warkanoid#05.mid
Resource/MIDI/Warkanoid#06.mid
Resource/MIDI/Warkanoid#07.mid
Resource/MIDI/Warkanoid#08.mid
Resource/MIDI/Warkanoid#09.mid
Resource/MIDI/Warkanoid#10.mid
Resource/MIDI/Warkanoid#11.mid
Resource/MIDI/Warkanoid#12.mid
Resource/MIDI/Warkanoid#13.mid
Resource/MIDI/Warkanoid#14.mid
Resource/MIDI/Warkanoid#15.mid
Resource/MIDI/Warkanoid#16.mid
Resource/MIDI/Warkanoid#17.mid
Resource/MIDI/Warkanoid#18.mid
Resource/MIDI/Warkanoid#19.mid
Resource/MIDI/Warkanoid#20.mid
Resource/MIDI/Warkanoid#21.mid
Resource/MIDI/Warkanoid#22.mid
Resource/MIDI/Warkanoid#23.mid
Resource/MIDI/Warkanoid#24.mid
Resource/MIDI/Warkanoid#25.mid
Resource/MIDI/Warkanoid#26.mid
Resource/MIDI/Warkanoid#27.mid
Resource/MIDI/Warkanoid#28.mid
Resource/MIDI/Warkanoid#29.mid
Resource/MIDI/Warkanoid#30.mid
Resource/MIDI/Warkanoid#31.mid
Resource/MIDI/Warkanoid#32.mid
Resource/MIDI/Warkanoid#33.mid
Resource/MIDI/Warkanoid#34.mid
Resource/MIDI/Warkanoid#35.mid
Resource/MIDI/Warkanoid#36.mid
Resource/MIDI/Warkanoid#37.mid
Resource/MIDI/Warkanoid#38.mid
Resource/MIDI/Warkanoid#39.mid
Resource/MIDI/Warkanoid#40.mid
Resource/MIDI/Warkanoid#41.mid
Resource/MIDI/Warkanoid#42.mid
Resource/MIDI/Warkanoid#43.mid
Resource/MIDI/Warkanoid#44.mid
Resource/MIDI/Warkanoid#45.mid
Resource/MIDI/Warkanoid#46.mid
Resource/MIDI/Warkanoid#47.mid
Resource/MIDI/Warkanoid#48.mid
Resource/MIDI/Warkanoid#49.mid
Resource/MIDI/Warkanoid#50.mid
Resource/MIDI/Warkanoid#51.mid
Resource/MIDI/Warkanoid#52.mid
Resource/MIDI/Warkanoid#53.mid
Resource/MIDI/Warkanoid#54.mid
Resource/MIDI/Warkanoid#55.mid
Resource/MIDI/Warkanoid#56.mid
Resource/MIDI/Warkanoid#57.mid
Resource/MIDI/Warkanoid#58.mid
Resource/Nature.BMP
Resource/Nature.ig
Resource/Reflexive.bif
Resource/Save2.gpr
Resource/tema2.BMP
TopList/Pics/BOT_BNR.GIF
.gif
TopList/Pics/CAPTAIN.GIF
.gif
TopList/Pics/CERGEANT.GIF
.gif
TopList/Pics/COLONEL.GIF
.gif
TopList/Pics/CORPORAL.GIF
.gif
TopList/Pics/EASY.GIF
.gif
TopList/Pics/FOOTER.HTM
TopList/Pics/GENERAL.GIF
.gif
TopList/Pics/HARD.GIF
.gif
TopList/Pics/HEADER.HTM
.html
TopList/Pics/LEFT_BNR.GIF
.gif
TopList/Pics/MAJOR.GIF
.gif
TopList/Pics/MARSHAL.GIF
.gif
TopList/Pics/MEDIUM.GIF
.gif
TopList/Pics/PRIVATE.GIF
.gif
TopList/Pics/RIGT_BNR.GIF
.gif
TopList/Pics/SERGEANT.GIF
.gif
TopList/Pics/THEME.JPG
.jpg
TopList/Pics/TIT_ENG.GIF
.gif
TopList/Pics/better_then_best.gif
.gif
TopList/Pics/brigadier_general.gif
.gif
TopList/Pics/clean_sheet.gif
.gif
TopList/Pics/crafty_paddle.gif
.gif
TopList/Pics/famous_hunter.gif
.gif
TopList/Pics/first_lieutenant.gif
.gif
TopList/Pics/fortunate_hunt.gif
.gif
TopList/Pics/general_of_the_rocket.gif
.gif
TopList/Pics/generalissimo.gif
.gif
TopList/Pics/gilded_cannon-ball.gif
.gif
TopList/Pics/lt_colonel.gif
.gif
TopList/Pics/major_general.gif
.gif
TopList/Pics/master_colonel.gif
.gif
TopList/Pics/master_sergeant.gif
.gif
TopList/Pics/score_stealer.gif
.gif
TopList/Pics/second_lieutenant.gif
.gif
TopList/Pics/second_sergeant.gif
.gif
TopList/Pics/sergent-chief.gif
.gif
TopList/Pics/step_ahead.gif
.gif
TopList/Pics/thirst_for_life.gif
.gif
TopList/Pics/unique_fortune.gif
.gif
Warkanoid2.ICO
Warkanoid2.RWG
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 753KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Warkanoid2.exe
.exe windows:4 windows x86 arch:x86

6ce86e4d6490d7e4eb63c996753c25d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
Module32Next
Module32First
LocalFree
FormatMessageA
CreateMutexA
OpenMutexA
WaitForSingleObject
LoadLibraryA
GetProcAddress
GetTickCount
WaitForMultipleObjectsEx
CreateThread
GetCurrentThread
SetEnvironmentVariableA
MulDiv
LocalAlloc
WriteFile
RaiseException
CompareStringW
CompareStringA
GetOEMCP
GetACP
GetCPInfo
lstrlenA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
FlushFileBuffers
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
ReadFile
GetFileSize
CreateToolhelp32Snapshot
GetCurrentProcessId
Process32First
Process32Next
CreateFileA
ResetEvent
GetCurrentProcess
DuplicateHandle
GetLastError
OutputDebugStringA
SuspendThread
CreateProcessA
ResumeThread
WriteProcessMemory
OpenProcess
ReadProcessMemory
SetCurrentDirectoryA
GetModuleFileNameA
GetCurrentDirectoryA
FindFirstFileA
WideCharToMultiByte
FreeEnvironmentStringsW
CloseHandle
FindClose
TerminateProcess
Sleep
GetExitCodeProcess
DeleteFileA
SetFileAttributesA
FindNextFileA
MoveFileA
RemoveDirectoryA
FreeLibrary
FileTimeToDosDateTime
GetSystemTimeAsFileTime
GetFileAttributesA
CreateDirectoryA
GetVersion
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
SetEndOfFile
InterlockedDecrement
InterlockedIncrement
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
FreeEnvironmentStringsA

user32

LoadIconA
RegisterClassExA
CreateWindowExA
UpdateWindow
PeekMessageA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
DefWindowProcA
GetClientRect
LoadCursorA
SetCursor
SendMessageA
SetWindowTextA
MessageBeep
GetWindowRect
IsWindowVisible
ShowWindow
SetForegroundWindow
BringWindowToTop
AdjustWindowRectEx
IsIconic
SystemParametersInfoA
MoveWindow
MessageBoxA
PostMessageA
GetDesktopWindow
GetActiveWindow
GetTabbedTextExtentA
GetDC
ReleaseDC
wsprintfA
GetForegroundWindow
GetWindowThreadProcessId
GetWindowLongA
EnumThreadWindows
EnumWindows
SendMessageTimeoutA

gdi32

CreatePen
Rectangle
CreateSolidBrush
LPtoDP
SetTextColor
TextOutA
CreateFontA
SelectObject
DeleteObject
CreateDIBSection
SetBkMode
DeleteDC
CreateCompatibleDC
BitBlt
GetObjectA

advapi32

CryptDestroyHash
CryptAcquireContextA
CryptCreateHash
CryptHashData
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CryptImportKey
CryptVerifySignatureA
CryptDestroyKey
CryptReleaseContext

winmm

timeGetTime

imagehlp

ImageRvaToVa
UnMapAndLoad
MapAndLoad

comctl32

_TrackMouseEvent

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 32KB

.rsrc Size: 7KB - Virtual size: 6KB

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 387KB - Virtual size: 387KB

DATA Size: 8KB - Virtual size: 7KB

BSS Size: - Virtual size: 2KB

.idata Size: 9KB - Virtual size: 8KB

.edata Size: 512B - Virtual size: 165B

.reloc Size: 27KB - Virtual size: 27KB

.rsrc Size: 92KB - Virtual size: 92KB

87cbea85bad063a4b5b6ee40ba9a6277

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 15KB

d3a52cf7a249fe140776f7b5c43c1566

Headers

File Characteristics

Imports

user32

kernel32

advapi32

gdi32

shell32

Exports

Exports

Sections

.text Size: 720KB - Virtual size: 716KB

.rdata Size: 76KB - Virtual size: 73KB

.data Size: 80KB - Virtual size: 708KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 56KB - Virtual size: 54KB

Headers

File Characteristics

Sections

CODE Size: 753KB - Virtual size: 752KB

DATA Size: 8KB - Virtual size: 7KB

BSS Size: - Virtual size: 11KB

.idata Size: 10KB - Virtual size: 9KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 48KB - Virtual size: 48KB

.rsrc Size: 102KB - Virtual size: 102KB

6ce86e4d6490d7e4eb63c996753c25d3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 32KB

.rsrc
Size: 7KB - Virtual size: 6KB

CODE
Size: 387KB - Virtual size: 387KB

DATA
Size: 8KB - Virtual size: 7KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 9KB - Virtual size: 8KB

.edata
Size: 512B - Virtual size: 165B

.reloc
Size: 27KB - Virtual size: 27KB

.rsrc
Size: 92KB - Virtual size: 92KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 15KB

.text
Size: 720KB - Virtual size: 716KB

.rdata
Size: 76KB - Virtual size: 73KB

.data
Size: 80KB - Virtual size: 708KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 56KB - Virtual size: 54KB

CODE
Size: 753KB - Virtual size: 752KB

DATA
Size: 8KB - Virtual size: 7KB

BSS
Size: - Virtual size: 11KB

.idata
Size: 10KB - Virtual size: 9KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 48KB - Virtual size: 48KB

.rsrc
Size: 102KB - Virtual size: 102KB

.text
Size: 156KB - Virtual size: 154KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 36KB - Virtual size: 50KB

.rsrc
Size: 32KB - Virtual size: 31KB