2f04ab2140f29fbc2c2eeaf07cb373c7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2f04ab2140f29fbc2c2eeaf07cb373c7_JaffaCakes118
Size

873KB
MD5

2f04ab2140f29fbc2c2eeaf07cb373c7
SHA1

715dab9f324af95925648f26b6f1945111bb01d1
SHA256

86d5c958a498ce09c21aaf672409de2e871a906d3629252fecd1fc3dd5aaf301
SHA512

37f24ba54b3c13de754d84fa19c5f9690e6cf0b630d933a905a2f9321857ee617de88cff74f3f6838d0383660d6a44f173d7fd46b6612ef8c03729a334126b3f
SSDEEP

24576:oSVSYeepAwGvw/TMvae/fmQGBgKm5Vl5WoKAnow:xw6wUTTeXem5VGoTt

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cvery.comdel51745567722/CLIENT/CLIENT.EXE
unpack001/cvery.comdel51745567722/SERVER/SERVER.EXE

Files

2f04ab2140f29fbc2c2eeaf07cb373c7_JaffaCakes118
.rar
cvery.comdel51745567722/CLIENT/About.dcu
cvery.comdel51745567722/CLIENT/About.dfm
cvery.comdel51745567722/CLIENT/About.pas
cvery.comdel51745567722/CLIENT/BOX.RES
cvery.comdel51745567722/CLIENT/CLIENT.DPR
cvery.comdel51745567722/CLIENT/CLIENT.EXE
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 702KB - Virtual size: 702KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 452KB - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cvery.comdel51745567722/CLIENT/CLIENT.ICO
cvery.comdel51745567722/CLIENT/CLIENT.RES
cvery.comdel51745567722/CLIENT/CLIENT.cfg
cvery.comdel51745567722/CLIENT/CLIENT.dof
cvery.comdel51745567722/CLIENT/CustObj.dcu
cvery.comdel51745567722/CLIENT/CustObj.pas
cvery.comdel51745567722/CLIENT/DIAMONDS.DCU
cvery.comdel51745567722/CLIENT/Diamonds.pas
cvery.comdel51745567722/CLIENT/LBEND.DCU
cvery.comdel51745567722/CLIENT/LBEND.PAS
cvery.comdel51745567722/CLIENT/LCRUTCH.DCU
cvery.comdel51745567722/CLIENT/LCRUTCH.PAS
cvery.comdel51745567722/CLIENT/MAIN.DCU
cvery.comdel51745567722/CLIENT/MAIN.DDP
cvery.comdel51745567722/CLIENT/MAIN.DFM
cvery.comdel51745567722/CLIENT/MAIN.PAS
cvery.comdel51745567722/CLIENT/MYCONST.DCU
cvery.comdel51745567722/CLIENT/MYCONST.PAS
cvery.comdel51745567722/CLIENT/MYTYPE.DCU
cvery.comdel51745567722/CLIENT/MYTYPE.PAS
cvery.comdel51745567722/CLIENT/RBEND.DCU
cvery.comdel51745567722/CLIENT/RBEND.PAS
cvery.comdel51745567722/CLIENT/RCRUTCH.DCU
cvery.comdel51745567722/CLIENT/RCRUTCH.PAS
cvery.comdel51745567722/CLIENT/STICK.DCU
cvery.comdel51745567722/CLIENT/STICK.PAS
cvery.comdel51745567722/CLIENT/TCPthreadpas.dcu
cvery.comdel51745567722/CLIENT/TCPthreadpas.pas
cvery.comdel51745567722/CLIENT/TETRIS.ICO
cvery.comdel51745567722/CLIENT/Tletter.dcu
cvery.comdel51745567722/CLIENT/Tletter.pas
cvery.comdel51745567722/CLIENT/loginformpas.dcu
cvery.comdel51745567722/CLIENT/loginformpas.ddp
cvery.comdel51745567722/CLIENT/loginformpas.dfm
cvery.comdel51745567722/CLIENT/loginformpas.pas
cvery.comdel51745567722/CLIENT/mainformpas.dcu
cvery.comdel51745567722/CLIENT/mainformpas.ddp
cvery.comdel51745567722/CLIENT/mainformpas.dfm
cvery.comdel51745567722/CLIENT/mainformpas.pas
cvery.comdel51745567722/CLIENT/skins/skin0000.skn
cvery.comdel51745567722/SERVER/About.dcu
cvery.comdel51745567722/SERVER/About.ddp
cvery.comdel51745567722/SERVER/About.dfm
cvery.comdel51745567722/SERVER/About.pas
cvery.comdel51745567722/SERVER/MYCONST.DCU
cvery.comdel51745567722/SERVER/MYCONST.PAS
cvery.comdel51745567722/SERVER/MYTYPE.DCU
cvery.comdel51745567722/SERVER/MYTYPE.PAS
cvery.comdel51745567722/SERVER/SERVER.DPR
cvery.comdel51745567722/SERVER/SERVER.EXE
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 774KB - Virtual size: 773KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cvery.comdel51745567722/SERVER/SERVER.RES
cvery.comdel51745567722/SERVER/SERVER.cfg
cvery.comdel51745567722/SERVER/SERVER.dof
cvery.comdel51745567722/SERVER/SETUP.ICO
cvery.comdel51745567722/SERVER/USERDATA.MDB
cvery.comdel51745567722/SERVER/mainformpas.dcu
cvery.comdel51745567722/SERVER/mainformpas.ddp
cvery.comdel51745567722/SERVER/mainformpas.dfm
cvery.comdel51745567722/SERVER/mainformpas.pas
cvery.comdel51745567722/SERVER/skins/skin0000.skn
cvery.comdel51745567722/下载说明.htm
.html .js polyglot
cvery.comdel51745567722/测试用户名.txt

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 702KB - Virtual size: 702KB

DATA Size: 9KB - Virtual size: 8KB

BSS Size: - Virtual size: 4KB

.idata Size: 10KB - Virtual size: 10KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 51KB - Virtual size: 51KB

.rsrc Size: 452KB - Virtual size: 452KB

Headers

File Characteristics

Sections

CODE Size: 774KB - Virtual size: 773KB

DATA Size: 10KB - Virtual size: 9KB

BSS Size: - Virtual size: 3KB

.idata Size: 9KB - Virtual size: 9KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 57KB - Virtual size: 56KB

.rsrc Size: 44KB - Virtual size: 44KB

CODE
Size: 702KB - Virtual size: 702KB

DATA
Size: 9KB - Virtual size: 8KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 10KB - Virtual size: 10KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 51KB - Virtual size: 51KB

.rsrc
Size: 452KB - Virtual size: 452KB

CODE
Size: 774KB - Virtual size: 773KB

DATA
Size: 10KB - Virtual size: 9KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 9KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 57KB - Virtual size: 56KB

.rsrc
Size: 44KB - Virtual size: 44KB