f3bb7bef8143c2025d109a3fbfc54e40_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f3bb7bef8143c2025d109a3fbfc54e40_JaffaCakes118
Size

799KB
MD5

f3bb7bef8143c2025d109a3fbfc54e40
SHA1

7270e5dcf273de32ccea31986aa53cbd014c3981
SHA256

f23732d0a0fb20f95dcd8238e120c9b15b24f52b8bd177c8b19f3fbd5ad6f017
SHA512

da6cdc03d49e1cc6fa670acfb9c6abd586099fa997aef175748a0bff4605d40e223d362bfdf7a4d729cf7e18424b9b2ed30f0d5d2635002d9232a6bb8f720d5c
SSDEEP

24576:8QrHpRtU1ARoTmuIDGRRVhvNPsNjcjUQdUm9kMud4OJ5ukz:8QzP21kZu+GRhKNIUyUm9qd4gZz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/143007496/测试/Project1.exe

Files

f3bb7bef8143c2025d109a3fbfc54e40_JaffaCakes118
.rar
143007496/ADD_MX.DCU
143007496/ADD_MX.DDP
143007496/ADD_MX.DFM
143007496/ADD_MX.PAS
143007496/ADD_MX.~PAS
143007496/ADD_MX.~ddp
143007496/ADD_MX.~dfm
143007496/DataModule.dcu
143007496/DataModule.ddp
143007496/DataModule.dfm
143007496/DataModule.pas
143007496/DataModule.~ddp
143007496/DataModule.~dfm
143007496/DataModule.~pas
143007496/INPUTF.DCU
143007496/INPUTF.DDP
143007496/INPUTF.DFM
143007496/INPUTF.PAS
143007496/MAIN.DCU
143007496/MAIN.JPG
.jpg
143007496/MAIN.PAS
143007496/MAIN.ddp
143007496/MAIN.dfm
143007496/MAIN.~PAS
143007496/MAIN.~ddp
143007496/MAIN.~dfm
143007496/MEG_GD.DCU
143007496/MEG_GD.DDP
143007496/MEG_GD.DFM
143007496/MEG_GD.PAS
143007496/MEG_GD.~PAS
143007496/MEG_GD.~ddp
143007496/MEG_GD.~dfm
143007496/ORDER.DPR
143007496/ORDER.RES
143007496/ORDER.cfg
143007496/ORDER.dof
143007496/OUTSEND.DCU
143007496/OUTSEND.DDP
143007496/OUTSEND.DFM
143007496/OUTSEND.PAS
143007496/PASSWORD.DCU
143007496/PASSWORD.DDP
143007496/PASSWORD.DFM
143007496/PASSWORD.PAS
143007496/PASSWORD.~PAS
143007496/PASSWORD.~ddp
143007496/PASSWORD.~dfm
143007496/PREVIEW.DCU
143007496/PREVIEW.DDP
143007496/PREVIEW.DFM
143007496/PREVIEW.PAS
143007496/REP1.DCU
143007496/REP1.DDP
143007496/REP1.DFM
143007496/REP1.PAS
143007496/REP2.DCU
143007496/REP2.DDP
143007496/REP2.DFM
143007496/REP2.PAS
143007496/REP3.DCU
143007496/REP3.DDP
143007496/REP3.DFM
143007496/REP3.PAS
143007496/REP4.DCU
143007496/REP4.DDP
143007496/REP4.DFM
143007496/REP4.PAS
143007496/REP5.DFM
143007496/REP5.PAS
143007496/REP6.DCU
143007496/REP6.DDP
143007496/REP6.DFM
143007496/REP6.PAS
143007496/SEE_MX.DCU
143007496/SEE_MX.DDP
143007496/SEE_MX.DFM
143007496/SEE_MX.PAS
143007496/SPL.DCU
143007496/SPL.DDP
143007496/SPL.DFM
143007496/SPL.PAS
143007496/Unit3.dcu
143007496/Unit3.ddp
143007496/Unit3.dfm
143007496/Unit3.pas
143007496/Unit3.~ddp
143007496/Unit3.~dfm
143007496/Unit3.~pas
143007496/inputf.~ddp
143007496/inputf.~dfm
143007496/inputf.~pas
143007496/order.~dpr
143007496/outsend.~ddp
143007496/outsend.~dfm
143007496/outsend.~pas
143007496/preview.~ddp
143007496/preview.~dfm
143007496/preview.~pas
143007496/rep1.~ddp
143007496/rep1.~dfm
143007496/rep1.~pas
143007496/rep2.~ddp
143007496/rep2.~dfm
143007496/rep2.~pas
143007496/rep3.~ddp
143007496/rep3.~dfm
143007496/rep3.~pas
143007496/rep4.~ddp
143007496/rep4.~dfm
143007496/rep4.~pas
143007496/rep5.~dfm
143007496/rep5.~pas
143007496/rep6.~ddp
143007496/rep6.~dfm
143007496/rep6.~pas
143007496/see_mx.~ddp
143007496/see_mx.~dfm
143007496/see_mx.~pas
143007496/spl.~ddp
143007496/spl.~dfm
143007496/spl.~pas
143007496/下载说明.htm
.html .js polyglot
143007496/文档.txt
143007496/测试/Project1.cfg
143007496/测试/Project1.dof
143007496/测试/Project1.dpr
143007496/测试/Project1.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
143007496/测试/Project1.res
143007496/测试/Unit1.dcu
143007496/测试/Unit1.ddp
143007496/测试/Unit1.dfm
143007496/测试/Unit1.pas
143007496/测试/Unit1.~ddp
143007496/测试/Unit1.~dfm
143007496/测试/Unit1.~pas
143007496/相关数据库工具/Project1.cfg
143007496/相关数据库工具/Project1.dof
143007496/相关数据库工具/Project1.dpr
143007496/相关数据库工具/Project1.res
143007496/相关数据库工具/Project1.~dpr
143007496/相关数据库工具/Unit1.dcu
143007496/相关数据库工具/Unit1.ddp
143007496/相关数据库工具/Unit1.dfm
143007496/相关数据库工具/Unit1.pas
143007496/相关数据库工具/Unit1.~ddp
143007496/相关数据库工具/Unit1.~dfm
143007496/相关数据库工具/Unit1.~pas
143007496/相关数据库工具/Unit2.dcu
143007496/相关数据库工具/Unit2.ddp
143007496/相关数据库工具/Unit2.dfm
143007496/相关数据库工具/Unit2.pas
143007496/相关数据库工具/Unit2.~ddp
143007496/相关数据库工具/Unit2.~dfm
143007496/相关数据库工具/Unit2.~pas
143007496/相关数据库工具/Unit3.dcu
143007496/相关数据库工具/Unit3.ddp
143007496/相关数据库工具/Unit3.dfm
143007496/相关数据库工具/Unit3.pas
143007496/相关数据库工具/Unit3.~ddp
143007496/相关数据库工具/Unit3.~dfm
143007496/相关数据库工具/Unit3.~pas
143007496/相关文档/1.BMP
143007496/相关文档/1.JPG
.jpg
143007496/相关文档/2.BMP
143007496/相关文档/2.JPG
.jpg
143007496/相关文档/3.BMP
143007496/相关文档/4.BMP
143007496/相关文档/5.BMP
143007496/相关文档/6.BMP
143007496/相关文档/D1.BMP
143007496/相关文档/D2.BMP
143007496/相关文档/D3.BMP
143007496/相关文档/D4.BMP
143007496/相关文档/D5.BMP
143007496/相关文档/ICON071.BMP
143007496/相关文档/ICON078.BMP
143007496/相关文档/ICON079.BMP
143007496/相关文档/ICON177.BMP
143007496/相关文档/LMAIN.BMP
143007496/相关文档/LMAIN1.BMP
143007496/相关文档/MONITOR.BMP
143007496/相关文档/README.DOC
.doc windows office2003
143007496/相关文档/System Apples Network Drive (offline).bmp
143007496/相关文档/System Apples Removable Drive.bmp
143007496/相关文档/TREEBK.BMP
143007496/相关文档/briefcase.bmp
143007496/相关文档/张.txt
143007496/相关文档/张新生.txt
143007496/相关文档/生产过程.rtf
.rtf

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 508KB - Virtual size: 507KB

DATA Size: 6KB - Virtual size: 5KB

BSS Size: - Virtual size: 3KB

.idata Size: 8KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 36KB - Virtual size: 36KB

.rsrc Size: 20KB - Virtual size: 20KB

CODE
Size: 508KB - Virtual size: 507KB

DATA
Size: 6KB - Virtual size: 5KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 8KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 36KB - Virtual size: 36KB

.rsrc
Size: 20KB - Virtual size: 20KB