48bdb899469511d8b15d510ad47093b0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

48bdb899469511d8b15d510ad47093b0_JaffaCakes118
Size

516KB
MD5

48bdb899469511d8b15d510ad47093b0
SHA1

d47e1612e1d255c5210cc5f3cacf3f310eb02090
SHA256

6a216fdcfe02a591f8fcf672ef93eb8c342a6a6b33e56eaeb6367a90378ea147
SHA512

60a6950b78479af3a99acbc92663de37ef5e3f701a00b0c77b8516632cfc12cf0525c02d9bc53f1ac3f6a6173511641eccdf7fab94d2d6673d037fd291551ef1
SSDEEP

12288:s4IwYg92atOxnwe1FDAnB9BWpUTZaF8PUhYxohP6:sLB1oOxnwe1FDAnB9BWpiZw8eEyS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48bdb899469511d8b15d510ad47093b0_JaffaCakes118

Files

48bdb899469511d8b15d510ad47093b0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

09b2081e6a228aeb1893c2e7b29150a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
_setjmp3
sprintf
exit
longjmp

kernel32

DisableThreadLibraryCalls
FreeLibrary
InterlockedExchange
Sleep
LocalAlloc
LocalFree
GetCommandLineA
GetModuleHandleA
GetLastError
GetProcAddress
LoadLibraryA

user32

MessageBoxA
CharUpperA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

ADIS
ADISDYNA
ADISINIT
ADISKEY
BSIO
CBL_CFGREAD_EXTFH
CE109PRINTER
CE109TABLO
CE109TARIH
CE109TBAR
E1009
E109PRINTER
E109PRINTERONDESTROYED
E109PRINTERONNEWPAGE
E109TABLO
E109TABLOONAFTERROWCOLCHANGE
E109TABLOONDESTROYED
E109TARIH
E109TARIHITEMFUNCTIONKEY
E109TARIHONDESTROYED
E109TBAR
E109TBARONDESTROYED
E109TBARONITEMSELECTED
E109TBARPROCESSMENU
ESDSFH
EXTFHSUB
FHREDIR
FHR_CLOSE
MFFH
MFINI
RE109PRINTER
RE109TABLO
RE109TARIH
RE109TBAR
STRIPE_CLOSE_FILE
STRIPE_CONFIG_INFO
STRIPE_COPY_FILE
STRIPE_CREATE_FILE
STRIPE_DELETE_FILE
STRIPE_FLUSH_FILE
STRIPE_FREE_RECORD_LOCK
STRIPE_GET_RECORD_LOCK
STRIPE_INITIALIZE
STRIPE_LOCKFILE
STRIPE_OPEN_FILE
STRIPE_READ_FILE
STRIPE_RELSEMA
STRIPE_RENAME_FILE
STRIPE_SEEK_END
STRIPE_SETSEMA
STRIPE_TEST_RECORD_LOCK
STRIPE_UNLFILE
STRIPE_UNLOCK
STRIPE_WRITE_FILE
XFH_CLOSE_MAPPER
XFH_CLOSE_MVS
XFH_FUNC
_mFdllinfo

Sections

.text
Size: 452KB - Virtual size: 449KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09b2081e6a228aeb1893c2e7b29150a3

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 452KB - Virtual size: 449KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 163KB

Size: 4KB - Virtual size: 3KB

.reloc Size: 44KB - Virtual size: 42KB

.text
Size: 452KB - Virtual size: 449KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 163KB

.reloc
Size: 44KB - Virtual size: 42KB