0f4bdd6be88d3c3ff7b4eb398e1b41b5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0f4bdd6be88d3c3ff7b4eb398e1b41b5_JaffaCakes118
Size

41KB
MD5

0f4bdd6be88d3c3ff7b4eb398e1b41b5
SHA1

dea6d2273ebaaccb9360a63002be649bc46a4cb0
SHA256

c1dad6c4d31a4542c4f9787c15decd6e77c68afefd432a3e2793ba195f022a9e
SHA512

8cc19e661a54da59aa9905e2c624a0ce0431c4a870a21d1ea86e29d8f6d30484ee0c698cb008dd1edbbf80da6ec579e8d07f68487f3d91fb3db89e2aaa48a2ea
SSDEEP

768:u/UjR7JxPRn/msaMWshFKiJWlEVM8pZ2Z3bj3yATbVQ9sk+/CtV3v9M:u8jvxPlemblsK3vm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f4bdd6be88d3c3ff7b4eb398e1b41b5_JaffaCakes118

Files

0f4bdd6be88d3c3ff7b4eb398e1b41b5_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

@GetPackageInfoTable
EsDbEd..TEsCustomDbDateEdit@28EAF1CD
EsDbEd..TEsCustomDbNumberEdit@7FF9F5A8
EsDbEd..TEsDbDateEdit@A3222228
EsDbEd..TEsDbNumberEdit@04592C67
EsDbEd.DateFieldTypes@0DB73716
EsDbEd.EsDbEd@00000000
EsDbEd.Finalization@51F89FF7
EsDbEd.NumFieldTypes@0DB73716
EsDbEd.TEsCustomDbDateEdit.CMEnter@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.CMExit@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.CMGetDataLink@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.Change@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.Create@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.DataChange@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.Destroy@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.EditingChange@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.GetButtonEnabled@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.GetDataField@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.GetDataSource@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.GetField@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.GetReadOnly@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.GetTextMargins@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.KeyDown@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.KeyPress@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.Notification@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.PopupClose@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.PopupOpen@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.SetDataField@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.SetDataSource@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.SetFocused@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.SetReadOnly@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.UpdateData@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.WMCut@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.WMPaint@23EDC2EF
EsDbEd.TEsCustomDbDateEdit.WMPaste@23EDC2EF
EsDbEd.TEsCustomDbDateEdit@64CA20F4
EsDbEd.TEsCustomDbNumberEdit.CMEnter@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.CMExit@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.CMGetDataLink@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.Change@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.Create@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.DataChange@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.Destroy@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.EditingChange@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.GetButtonEnabled@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.GetDataField@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.GetDataSource@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.GetField@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.GetReadOnly@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.GetTextMargins@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.KeyDown@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.KeyPress@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.Notification@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.PopupClose@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.PopupOpen@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.SetDataField@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.SetDataSource@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.SetFocused@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.SetReadOnly@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.UpdateData@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.WMCut@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.WMPaint@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit.WMPaste@23EDC2EF
EsDbEd.TEsCustomDbNumberEdit@BBD924CF
EsDbEd.TEsDbDateEdit@DF01514F
EsDbEd.TEsDbNumberEdit@40385B8E
Finalize
Initialize
TES103BR.@GetPackageInfoTable@51F89FF7
TES103BR.@PackageLoad@51F89FF7
TES103BR.@PackageUnload@51F89FF7

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 61B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 25B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 15KB - Virtual size: 14KB

DATA Size: 512B - Virtual size: 52B

BSS Size: - Virtual size: 61B

.idata Size: 12KB - Virtual size: 12KB

.edata Size: 4KB - Virtual size: 3KB

.rdata Size: 512B - Virtual size: 25B

.reloc Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 15KB - Virtual size: 14KB

DATA
Size: 512B - Virtual size: 52B

BSS
Size: - Virtual size: 61B

.idata
Size: 12KB - Virtual size: 12KB

.edata
Size: 4KB - Virtual size: 3KB

.rdata
Size: 512B - Virtual size: 25B

.reloc
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB