4328a17300e6a153b7e7b9c58b1d2099_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4328a17300e6a153b7e7b9c58b1d2099_JaffaCakes118
Size

4.1MB
MD5

4328a17300e6a153b7e7b9c58b1d2099
SHA1

8418442f154d75f63f2f3e6553b69dfb2d22aae4
SHA256

72e8d879ec50bd3c3346ec45d1c688faadbeaad894c0ed024008b51660e99de9
SHA512

256bafc69bd1306bff35aeeaa57fea0d026b6808e58a6414b783735cf3b75ff0790542343c84f32014ede204f69cccf9b5a0e461f04460923df34836e421d461
SSDEEP

98304:dNLLNSHNiXiTbQ6pXP4Z6tSbiMjY+GLGPSC4DDTW+Afp1:PLLNSHNiSTbppDF+N6C4Duxfj

Score

3^/10

Malware Config

Signatures

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Z-A-I-N/dcx.dll
unpack001/Z-A-I-N/lagbar/lagbar/tbwin.dll
unpack001/Z-A-I-N/lagbar/tbwin.dll
unpack001/Z-A-I-N/mRadio/BARS.MDX
unpack001/Z-A-I-N/mRadio/MDX.DLL
unpack001/Z-A-I-N/mRadio/amp_in.dll
unpack001/Z-A-I-N/mRadio/views.mdx
unpack001/Z-A-I-N/mp3console/MDX/MDX.DLL
unpack001/Z-A-I-N/mp3console/MDX/bars.mdx
unpack001/Z-A-I-N/mp3console/MDX/ctl_gen.mdx
unpack001/Z-A-I-N/mp3console/MDX/views.mdx
unpack001/Z-A-I-N/mp3console/Popups/POPUPS.DLL

Files

4328a17300e6a153b7e7b9c58b1d2099_JaffaCakes118
.rar
Z-A-I-N/Advertising.ini
Z-A-I-N/AutoColor
.js
Z-A-I-N/BLackList.ini
Z-A-I-N/BanPro.ini
Z-A-I-N/Blocked.ini
Z-A-I-N/CloneScan.ini
Z-A-I-N/CooLNick.ini
Z-A-I-N/Ctcp.ini
Z-A-I-N/DALnet.ini
Z-A-I-N/DetectorCLone.ini
Z-A-I-N/Filter.ini
Z-A-I-N/Flood.ini
Z-A-I-N/Flood2.ini
Z-A-I-N/Found.txt
Z-A-I-N/FunNick.ini
Z-A-I-N/GuestKick.ini
Z-A-I-N/IRCopScan.ini
Z-A-I-N/InviteingKick.ini
Z-A-I-N/JoinFlood.ini
Z-A-I-N/New Folder/SockScanner.mrc
Z-A-I-N/New Folder/auto.op
Z-A-I-N/New Folder/auto.sys
.js
Z-A-I-N/New Folder/blue.nnt
Z-A-I-N/New Folder/cs_ask.mrc
.js
Z-A-I-N/New Folder/ping.mrc
.js
Z-A-I-N/New Folder/readme.doc
.doc windows office2003
Z-A-I-N/New Folder/slap-readme.txt
Z-A-I-N/New Folder/slap.ini
Z-A-I-N/New Folder/slap.mrc
.js
Z-A-I-N/OpenProxy.ini
Z-A-I-N/PhonesKick.ini
Z-A-I-N/Power.jpg
.jpg
Z-A-I-N/ProxyCatcher.mrc
Z-A-I-N/READ-ME.txt
Z-A-I-N/Seendata.hsh
Z-A-I-N/ShowOpv.ini
Z-A-I-N/aKickCLones.ini
.ps1
Z-A-I-N/acros readme.txt
Z-A-I-N/acros.hsh
Z-A-I-N/acros.mrc
.js
Z-A-I-N/aliases.ini
Z-A-I-N/antispam.ini
Z-A-I-N/antispam.mrc
.vbs
Z-A-I-N/autoLmits.ini
Z-A-I-N/autogreet.welcome
Z-A-I-N/away.mrc
Z-A-I-N/channels/IspMania.txt
Z-A-I-N/channels/Mazaonline.txt
Z-A-I-N/channels/Point4Fun.txt
Z-A-I-N/channels/Tafreeh.txt
Z-A-I-N/control.ini
Z-A-I-N/dcx.dll
.dll windows:4 windows x86 arch:x86

1e6b376da15ce6f218a7a2a9e806ceae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Coding\C++\Dcx\Release\dcx.pdb

Imports

comctl32

InitCommonControlsEx
ImageList_Create
_TrackMouseEvent
ImageList_Draw
ImageList_GetImageCount
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_GetIcon
ImageList_GetIconSize
ImageList_DrawEx

msimg32

TransparentBlt

kernel32

IsBadCodePtr
IsBadReadPtr
CreateFileA
SetStdHandle
VirtualQuery
InterlockedExchange
GetCPInfo
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
DisableThreadLibraryCalls
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetLocaleInfoA
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
FlushFileBuffers
WriteFile
SetFilePointer
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ReadFile
GetLastError
HeapFree
HeapSize
GetCurrentProcess
TerminateProcess
HeapReAlloc
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapAlloc
GetVersionExA
GetCommandLineA
RaiseException
RtlUnwind
ExitProcess
VirtualProtect
GetSystemInfo
LCMapStringA
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
lstrcmpA
lstrcmpiA
lstrcpynA
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
CreateFileMappingA
MapViewOfFile
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcpyA
lstrcatA
GetModuleHandleA
UnmapViewOfFile
CloseHandle
LCMapStringW
SetEndOfFile
VirtualFree

user32

FlashWindowEx
SetFocus
LoadCursorFromFileA
GetScrollRange
GetNextDlgTabItem
GetSystemMetrics
EqualRect
SetScrollInfo
GetScrollInfo
DrawIconEx
DrawEdge
ReleaseCapture
SetCapture
GetWindowDC
CopyRect
ClientToScreen
CreatePopupMenu
DeferWindowPos
EndDeferWindowPos
PtInRect
GetWindowTextLengthA
LoadCursorA
FindWindowExA
SetRect
DefWindowProcA
IsWindowVisible
SetParent
DestroyMenu
GetMenuItemInfoA
DestroyWindow
GetMenu
SetWindowLongA
TrackPopupMenuEx
DrawTextExA
InsertMenuItemA
OffsetRect
DeleteMenu
UnregisterClassA
wsprintfA
IsWindow
GetSysColor
SetMenuItemInfoA
AnimateWindow
RedrawWindow
GetDlgCtrlID
BeginDeferWindowPos
SetWindowPos
UpdateWindow
GetCursorPos
ScreenToClient
ShowWindow
MoveWindow
RemovePropA
GetDlgItem
GetClassNameA
GetParent
GetWindowTextA
EnableWindow
GetWindowLongA
GetPropA
InflateRect
SetWindowTextA
DestroyIcon
SetPropA
SetCursor
BeginPaint
GetClientRect
IsWindowEnabled
GetSysColorBrush
FillRect
SetRectEmpty
DrawTextA
EndPaint
InvalidateRect
LoadImageA
GetDC
ReleaseDC
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
SendMessageA
GetClassInfoExA
RegisterClassExA
RegisterClassA
CreateWindowExA
CallWindowProcA
PostMessageA
GetMenuItemCount
GetSubMenu
FindWindowA
GetWindowRect
GetAsyncKeyState

gdi32

GetStockObject
DeleteObject
GetDeviceCaps
GetTextMetricsA
SelectObject
CreateFontIndirectA
SetTextColor
SetBkMode
DeleteDC
CreateCompatibleDC
LineTo
MoveToEx
ExtTextOutA
SetBkColor
CreatePen
RestoreDC
SaveDC
PatBlt
SetBrushOrgEx
CreatePatternBrush
CreateBitmap
StretchBlt
CreateSolidBrush
GetTextExtentPoint32A
Rectangle
ExcludeClipRect
GetObjectA

comdlg32

ChooseColorA
ChooseFontA
GetSaveFileNameA
GetOpenFileNameA

shell32

DragQueryFileA
DragFinish
ExtractIconExA
DragAcceptFiles

ole32

CoGetClassObject
OleInitialize
OleUninitialize

oleaut32

SysFreeString
VariantClear
VariantInit
DispGetParam

Exports

Exports

ColorDialog
FontDialog
GetSystemColor
GetTaskbarPos
IsThemedXP
LoadDll
Mark
OpenDialog
SaveDialog
UnloadDll
Version
_xdialog
_xdid
_xpop
_xpopup
mpopup
xdialog
xdid
xpop
xpopup

Sections

.text
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Z-A-I-N/exclude
Z-A-I-N/ini/users.ini
Z-A-I-N/ircintro.hlp
Z-A-I-N/kbp.mrc
Z-A-I-N/kickmsg.txt
Z-A-I-N/killmsg.txt
Z-A-I-N/lagbar/desktop.ini
Z-A-I-N/lagbar/lagbar.ini
Z-A-I-N/lagbar/lagbar/desktop.ini
Z-A-I-N/lagbar/lagbar/lagbar.ini
Z-A-I-N/lagbar/lagbar/readme-lagbar.txt
Z-A-I-N/lagbar/lagbar/tbwin.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Attach
Detach
GetMouse
GetTBInfo
LoadDll
OnMouse
OnSize
Select
UnloadDll

Sections

CODE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 213B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Z-A-I-N/lagbar/tbwin.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Attach
Detach
GetMouse
GetTBInfo
LoadDll
OnMouse
OnSize
Select
UnloadDll

Sections

CODE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 213B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Z-A-I-N/logs/status.log
Z-A-I-N/mRadio/BARS.MDX
.dll windows:4 windows x86 arch:x86

99eee5c933b3e274b3f9aa164c57762c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

InvalidateRect
PostMessageA
SendMessageA
SetWindowLongA
DestroyIcon
CallWindowProcA
GetWindowLongA
DefWindowProcA
CreateWindowExA
DestroyWindow
GetKeyState
LoadIconA
GetClientRect
FillRect
LoadImageA
GetParent
EnableWindow

gdi32

GetObjectA
CreateBrushIndirect
DeleteDC
Rectangle
CreatePen
SelectObject
StretchBlt
BitBlt
CreateCompatibleDC
DeleteObject

shell32

ExtractIconExA

comctl32

ImageList_ReplaceIcon
ImageList_Add
ImageList_Replace
ImageList_Create
ImageList_Destroy
InitCommonControlsEx

msvcrt

??2@YAPAXI@Z
malloc
_adjust_fdiv
_initterm
free
_itoa
_stricmp
strncpy
__CxxFrameHandler
atoi
??3@YAXPAX@Z

kernel32

DisableThreadLibraryCalls

Exports

Exports

getMDXHeader

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Z-A-I-N/mRadio/MDX.DLL
.dll windows:4 windows x86 arch:x86

34b86dab5c0b41a24220fe3732aef3a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MapViewOfFile
WaitForSingleObject
ReleaseMutex
CreateFileMappingA
UnmapViewOfFile
CloseHandle
GetProcAddress
SetLastError
GetModuleFileNameA
LoadLibraryA
GetLastError
FreeLibrary
GlobalSize
GlobalFree
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentProcessId
CreateMutexA

user32

SetWindowPos
GetWindowLongA
PostMessageA
DrawTextA
CreateWindowExA
SetWindowLongA
GetSysColorBrush
RedrawWindow
ChildWindowFromPointEx
GetParent
GetDlgCtrlID
GetWindowRect
ScreenToClient
MoveWindow
GetActiveWindow
SendMessageA
GetDlgItem
SetFocus
ShowWindow
InvalidateRgn
DestroyIcon
GetSysColor
CallWindowProcA
GetClientRect
GetClassNameA
EnumChildWindows
DestroyWindow
EnableWindow
MapWindowPoints
GetWindow
RegisterClipboardFormatA
LoadStringA

gdi32

DeleteDC
GetTextFaceA
GetTextMetricsA
SelectObject
CreateCompatibleDC
DeleteObject
GetObjectA
CreateFontIndirectA
CreateBrushIndirect
GetStockObject
GetBkColor
GetTextColor
SetTextColor
SetBkColor

shell32

ExtractIconExA
DragQueryFileA

ole32

ReleaseStgMedium

msvcrt

_initterm
_onexit
malloc
sprintf
vsprintf
__dllonexit
atoi
strtol
strncpy
_adjust_fdiv
_strdup
__CxxFrameHandler
??2@YAPAXI@Z
free
_stricmp
_itoa
??3@YAXPAX@Z

Exports

Exports

ControlFromPoint
ConvertCoords
DLLInfo
DynamicControl
ErrorInfo
GetFont
LoadDll
MarkDialog
MoveControl
Remove
SetBorderStyle
SetColor
SetControlMDX
SetDialog
SetFont
SetMDXStyle
SetMircVersion

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Z-A-I-N/mRadio/amp_in.dll
.dll windows:4 windows x86 arch:x86

31a78ca4c5719a55b0d6e9a65fd44551

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
WaitForSingleObject
WriteFile
ReadFile
FreeLibrary
GetProcAddress
LoadLibraryA
GetFullPathNameA
GetTickCount
TerminateThread
CloseHandle
GetCurrentThreadId
CreateThread
CreateEventA
GetModuleFileNameA
GetFileSize
SetFilePointer
CreateFileA
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineA
GetVersion
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
SetEvent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetStringTypeA
GetOEMCP
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
RtlUnwind
LCMapStringA
LCMapStringW

user32

UnhookWindowsHookEx
DefWindowProcA
PostMessageA
CallNextHookEx
DestroyWindow
CreateWindowExA
SetWindowsHookExA
RegisterClassA
SendMessageA
UnregisterClassA

winmm

mciSendStringA

Exports

Exports

CurrentMusic
DLLInfo
FlushAllPlugins
Info
Misc
Play
PluginManager
Queue
Stop

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Z-A-I-N/mRadio/mradio.ini
Z-A-I-N/mRadio/mradio.mrc
.js
Z-A-I-N/mRadio/mradio_readme.txt
Z-A-I-N/mRadio/views.mdx
.dll windows:4 windows x86 arch:x86

07056cc36c129798d605c78512f748e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetLastError
GlobalFree
GlobalLock
GlobalUnlock
GetCurrentProcessId

user32

CallWindowProcA
SendMessageA
SetTimer
InvalidateRect
KillTimer
LoadStringA
MapWindowPoints
DestroyIcon
RedrawWindow
DefWindowProcA
GetWindowLongA
PostMessageA
LoadIconA
UpdateWindow
GetScrollInfo
SetScrollInfo
ScreenToClient
SetWindowLongA
SetFocus
GetClientRect
MessageBoxA
GetSysColorBrush
FillRect
GetSysColor
GetFocus
GetCursorPos

gdi32

GetBkColor
SetTextColor
CreateDIBPatternBrushPt
SelectObject
PatBlt
CreateSolidBrush
DeleteObject
SetBkMode
SetBkColor
GetTextExtentPoint32A
Ellipse
CreateRectRgnIndirect
SelectClipRgn

shell32

DragQueryFileA
ExtractIconExA

comctl32

InitCommonControlsEx
ImageList_SetOverlayImage
ImageList_Remove
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy

ole32

OleUninitialize
OleInitialize
DoDragDrop
RevokeDragDrop
RegisterDragDrop
ReleaseStgMedium

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
strncpy
atoi
free
vsprintf
__CxxFrameHandler
malloc
_adjust_fdiv
_itoa
_initterm
_stricmp
_strnicmp
_strdup
_purecall

Exports

Exports

getMDXHeader

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Z-A-I-N/mirc.hlp
Z-A-I-N/mirc.ini
Z-A-I-N/mp3.mrc
Z-A-I-N/mp3console/MDX/MDX.DLL
.dll windows:4 windows x86 arch:x86

34b86dab5c0b41a24220fe3732aef3a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MapViewOfFile
WaitForSingleObject
ReleaseMutex
CreateFileMappingA
UnmapViewOfFile
CloseHandle
GetProcAddress
SetLastError
GetModuleFileNameA
LoadLibraryA
GetLastError
FreeLibrary
GlobalSize
GlobalFree
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentProcessId
CreateMutexA

user32

SetWindowPos
GetWindowLongA
PostMessageA
DrawTextA
CreateWindowExA
SetWindowLongA
GetSysColorBrush
RedrawWindow
ChildWindowFromPointEx
GetParent
GetDlgCtrlID
GetWindowRect
ScreenToClient
MoveWindow
GetActiveWindow
SendMessageA
GetDlgItem
SetFocus
ShowWindow
InvalidateRgn
DestroyIcon
GetSysColor
CallWindowProcA
GetClientRect
GetClassNameA
EnumChildWindows
DestroyWindow
EnableWindow
MapWindowPoints
GetWindow
RegisterClipboardFormatA
LoadStringA

gdi32

DeleteDC
GetTextFaceA
GetTextMetricsA
SelectObject
CreateCompatibleDC
DeleteObject
GetObjectA
CreateFontIndirectA
CreateBrushIndirect
GetStockObject
GetBkColor
GetTextColor
SetTextColor
SetBkColor

shell32

ExtractIconExA
DragQueryFileA

ole32

ReleaseStgMedium

msvcrt

_initterm
_onexit
malloc
sprintf
vsprintf
__dllonexit
atoi
strtol
strncpy
_adjust_fdiv
_strdup
__CxxFrameHandler
??2@YAPAXI@Z
free
_stricmp
_itoa
??3@YAXPAX@Z

Exports

Exports

ControlFromPoint
ConvertCoords
DLLInfo
DynamicControl
ErrorInfo
GetFont
LoadDll
MarkDialog
MoveControl
Remove
SetBorderStyle
SetColor
SetControlMDX
SetDialog
SetFont
SetMDXStyle
SetMircVersion

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Z-A-I-N/mp3console/MDX/bars.mdx
.dll windows:4 windows x86 arch:x86

99eee5c933b3e274b3f9aa164c57762c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

InvalidateRect
PostMessageA
SendMessageA
SetWindowLongA
DestroyIcon
CallWindowProcA
GetWindowLongA
DefWindowProcA
CreateWindowExA
DestroyWindow
GetKeyState
LoadIconA
GetClientRect
FillRect
LoadImageA
GetParent
EnableWindow

gdi32

GetObjectA
CreateBrushIndirect
DeleteDC
Rectangle
CreatePen
SelectObject
StretchBlt
BitBlt
CreateCompatibleDC
DeleteObject

shell32

ExtractIconExA

comctl32

ImageList_ReplaceIcon
ImageList_Add
ImageList_Replace
ImageList_Create
ImageList_Destroy
InitCommonControlsEx

msvcrt

??2@YAPAXI@Z
malloc
_adjust_fdiv
_initterm
free
_itoa
_stricmp
strncpy
__CxxFrameHandler
atoi
??3@YAXPAX@Z

kernel32

DisableThreadLibraryCalls

Exports

Exports

getMDXHeader

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Z-A-I-N/mp3console/MDX/ctl_gen.mdx
.dll windows:4 windows x86 arch:x86

36f31ad565ef7d1c14a9e5b079ac75ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
DisableThreadLibraryCalls
ReadFile
LoadLibraryA
CloseHandle
FreeLibrary

user32

PostMessageA
CallWindowProcA
GetScrollPos
LoadImageA
SetWindowPos
EnableWindow
GetScrollInfo
MoveWindow
DestroyWindow
SetCursor
UnregisterClassA
RegisterClassA
SendMessageA
GetCursorPos
ScreenToClient
DefWindowProcA
GetWindowLongA
SetWindowLongA
MessageBoxA
ClientToScreen
GetWindowRect
CreateWindowExA
GetParent
GetClientRect
GetSysColorBrush
FillRect
BeginPaint
GetSysColor
EndPaint
GetCursor
SetScrollPos
SetScrollInfo

gdi32

LineTo
MoveToEx
CreatePen
DeleteObject
SelectObject

comctl32

InitCommonControlsEx

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetMalloc

msvcrt

__dllonexit
_adjust_fdiv
malloc
_initterm
free
strchr
__CxxFrameHandler
??2@YAPAXI@Z
atoi
strncpy
wcslen
??3@YAXPAX@Z
_onexit
_stricmp
_itoa

Exports

Exports

getMDXHeader

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Z-A-I-N/mp3console/MDX/views.mdx
.dll windows:4 windows x86 arch:x86

07056cc36c129798d605c78512f748e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetLastError
GlobalFree
GlobalLock
GlobalUnlock
GetCurrentProcessId

user32

CallWindowProcA
SendMessageA
SetTimer
InvalidateRect
KillTimer
LoadStringA
MapWindowPoints
DestroyIcon
RedrawWindow
DefWindowProcA
GetWindowLongA
PostMessageA
LoadIconA
UpdateWindow
GetScrollInfo
SetScrollInfo
ScreenToClient
SetWindowLongA
SetFocus
GetClientRect
MessageBoxA
GetSysColorBrush
FillRect
GetSysColor
GetFocus
GetCursorPos

gdi32

GetBkColor
SetTextColor
CreateDIBPatternBrushPt
SelectObject
PatBlt
CreateSolidBrush
DeleteObject
SetBkMode
SetBkColor
GetTextExtentPoint32A
Ellipse
CreateRectRgnIndirect
SelectClipRgn

shell32

DragQueryFileA
ExtractIconExA

comctl32

InitCommonControlsEx
ImageList_SetOverlayImage
ImageList_Remove
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy

ole32

OleUninitialize
OleInitialize
DoDragDrop
RevokeDragDrop
RegisterDragDrop
ReleaseStgMedium

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
strncpy
atoi
free
vsprintf
__CxxFrameHandler
malloc
_adjust_fdiv
_itoa
_initterm
_stricmp
_strnicmp
_strdup
_purecall

Exports

Exports

getMDXHeader

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Z-A-I-N/mp3console/Popups/POPUPS.DLL
.dll windows:4 windows x86 arch:x86

3a10814cb4c1ecb8f052f0ca2be9a655

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
LoadLibraryA
GetModuleFileNameA

user32

GrayStringA
DrawTextA
CreatePopupMenu
GetSysColorBrush
DrawFrameControl
GetMenuItemInfoA
DeleteMenu
SetMenuItemInfoA
DestroyMenu
FillRect
GetSysColor
SystemParametersInfoA
DefWindowProcA
UnregisterClassA
DestroyWindow
CreateWindowExA
ReleaseDC
RegisterClassA
LoadImageA
DestroyIcon
TrackPopupMenuEx
GetDC
InsertMenuItemA
DrawIconEx
GetMenuItemCount

gdi32

MoveToEx
StretchBlt
CreateBitmap
CreateFontIndirectA
GetStockObject
GetTextExtentPoint32A
SetBkMode
PatBlt
GetBkColor
SetTextColor
LineTo
DeleteObject
SetBkColor
BitBlt
CreateCompatibleDC
GetObjectA
CreateCompatibleBitmap
DeleteDC
CreatePen
SelectObject

shell32

ExtractIconExA

msvcrt

_stricmp
_itoa
_adjust_fdiv
malloc
_initterm
free
atoi
toupper
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z

Exports

Exports

AddItem
Destroy
GetProperty
LoadImg
New
Popup
Remove
RemoveItem
SetMetrics
SetProperty
SetStyle

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Z-A-I-N/mp3console/mp3.ini
Z-A-I-N/mp3console/mp3.mrc
.js
Z-A-I-N/mp3console/mp3f.ml
Z-A-I-N/mp3console/mp3i.ml
Z-A-I-N/nick/nc_help.txt
Z-A-I-N/nick/nc_styles.txt
Z-A-I-N/nick/nc_system.mrc
Z-A-I-N/perform.ini
Z-A-I-N/phlare_2k/Thumbs.db
Z-A-I-N/phlare_2k/background.jpg
.jpg
Z-A-I-N/phlare_2k/background1.jpg
.jpg
Z-A-I-N/phlare_2k/buttons.bmp
Z-A-I-N/phlare_2k/channel.jpg
.jpg
Z-A-I-N/phlare_2k/message.jpg
.jpg
Z-A-I-N/phlare_2k/phlare2k.skn
.js
Z-A-I-N/phlare_2k/readme.txt
Z-A-I-N/phlare_2k/status.jpg
.jpg
Z-A-I-N/phlare_2k/switchbar.jpg
.jpg
Z-A-I-N/phlare_2k/toolbar.jpg
.jpg
Z-A-I-N/phlare_2k/window.jpg
.jpg
Z-A-I-N/popups.ini
Z-A-I-N/readme.txt
Z-A-I-N/readme1.txt
Z-A-I-N/remote.ini
Z-A-I-N/reply
Z-A-I-N/script1.ini
Z-A-I-N/securequery/logs.ini
Z-A-I-N/securequery/names.txt
Z-A-I-N/seen.mrc
.js
Z-A-I-N/servers.ini
Z-A-I-N/slaps.dat
Z-A-I-N/slaps.mrc
.js
Z-A-I-N/sounds/11.wav
Z-A-I-N/sounds/12.wav
Z-A-I-N/sounds/6.wav
Z-A-I-N/sounds/7.wav
Z-A-I-N/sounds/8.wav
Z-A-I-N/sounds/9.wav
Z-A-I-N/sounds/Chat.wav
Z-A-I-N/sounds/ConAborted.wav
Z-A-I-N/sounds/Msg.wav
Z-A-I-N/sounds/Notice.wav
Z-A-I-N/sounds/Notify.WAV
Z-A-I-N/sounds/alarm.wav
Z-A-I-N/sounds/away.wav
Z-A-I-N/sounds/close.wav
Z-A-I-N/sounds/deop.wav
Z-A-I-N/sounds/failed.wav
Z-A-I-N/sounds/ignore.wav
Z-A-I-N/sounds/input.WAV
Z-A-I-N/sounds/inviter.wav
Z-A-I-N/sounds/kick.wav
Z-A-I-N/sounds/slap.wav

Sharing

General

Malware Config

Signatures

Files

1e6b376da15ce6f218a7a2a9e806ceae

Headers

File Characteristics

PDB Paths

Imports

comctl32

msimg32

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 214KB - Virtual size: 213KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 3KB - Virtual size: 8KB

.reloc Size: 12KB - Virtual size: 12KB

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 19KB - Virtual size: 19KB

DATA Size: 512B - Virtual size: 220B

BSS Size: - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.edata Size: 512B - Virtual size: 213B

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 512B

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 19KB - Virtual size: 19KB

DATA Size: 512B - Virtual size: 220B

BSS Size: - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.edata Size: 512B - Virtual size: 213B

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 512B

99eee5c933b3e274b3f9aa164c57762c

Headers

File Characteristics

Imports

user32

gdi32

shell32

comctl32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

34b86dab5c0b41a24220fe3732aef3a1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

msvcrt

Exports

Exports

.text
Size: 214KB - Virtual size: 213KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 3KB - Virtual size: 8KB

.reloc
Size: 12KB - Virtual size: 12KB

CODE
Size: 19KB - Virtual size: 19KB

DATA
Size: 512B - Virtual size: 220B

BSS
Size: - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 213B

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 512B

CODE
Size: 19KB - Virtual size: 19KB

DATA
Size: 512B - Virtual size: 220B

BSS
Size: - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 213B

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 512B

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 8KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB