713182ccae92ad2a6d13a268f364606b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

713182ccae92ad2a6d13a268f364606b_JaffaCakes118
Size

112KB
MD5

713182ccae92ad2a6d13a268f364606b
SHA1

d76880e55f399a7b6eff3b5d5e40144251baf0dd
SHA256

5a61a65a11eeeb7e679a50854b07822fe24d95d8310f58930510c75bf3eaa9a2
SHA512

e9018f3c1c6c6c64047b9fd08760da4712ab042924287a68de2c3a92a33799be39d57ae6664d40192af24a9c5919250f5cb4a8bea1142d809769895a3f8c57ec
SSDEEP

3072:hhdXAa61+y8SOw6nZyaOxU2pgG3HiznG0npasSbm:ndXAa61j6a3gnGm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
713182ccae92ad2a6d13a268f364606b_JaffaCakes118

Files

713182ccae92ad2a6d13a268f364606b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

39b45636650b336c7df9b0cae89bf267

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep

user32

wsprintfA
SendMessageA

seatools

lpPds
lpSeaWinEnviroment

aisamwin32

stlong
ais_open
stdata
ais_build
ais_close
isamrp
isamrl
get_iserrno
ldint
isamrk
isamcl
isamoo
stint
ldlong
isamrn
isamrw
isamrg
ais_release
isamwa
isamkey
isamdr
isamrf

sea32

cfcmp
Erase
MessDisp
SeaStampaEuro
FieldCat
WBarraPagina
SeaMessaggio
WSeaEform
ClosePrinterLaser
TestCampo
DecConst
FormatStr
SeaVisualizzaEuro
cfload
WSeaChangePathNameArch
inverti
SeaOpeDec
Exists
MCopy2
ststring
AdeguaLoadrecord
errdisp
SeaArrot
cfstore
OpenPrinterLaser
SeaGetEnv32
cfinit
getanno
movebyte
SeaTestVisualizzaEuro

seaaccregisw32

Accetta_dati_registro

seasrvcon02w32

DTlimite
WfnImpostaRegimeSemplificata
aggconts
agg_cont
Tipologia_Conto
fnAnnoEuroUnica
SeaConvertiImportoLireEuro
fnLeggiDatiEuro

seasrvcon03w32

leggi_dati_intestazione

seasrvbns02w32

GetStampa12PolliciBeni
Leggi_Studio_Ben
WLeggi_Azienda_Bns
Leggi_Azienda_Cont
WfnGetIndexRivalutazione
WfnCtrlProgressiviEAmmortamentiBeneAllaData
Scheda_Storica_Precedente
Scheda_Storica_Alla_Data
WsbSetFlagNumericaStorica
Calcola_Scheda_Storica
ConvertiMovimentiInEuroLire
Aggiorna_Beni
Numero_Progressivo_Movimento
WfnExistsRivalutazione
WfnCalcoloAmmortamentoEffettuato
IsMovDifferito
Print_Bns
WfnGetItemRivalutazione
GiustificaCampo
fnAnnoBnsData

seabrowsesrv

SetColonna
Messaggio

seasrvuni01w32

SeaLog
SeaLog_Init
SeaLog_Show

seaconserlvw32

WfnCreaFileMailSuHome

msvcrt

_adjust_fdiv
malloc
_initterm
free
fread
exit
fopen
fprintf
fclose
_unlink

Exports

Exports

InitBrowse
TerminateBrowse
WfnCheckAziendaRivse
WfnCheckProgrammaRiv
WfnConfermaProspRiv
WfnDefaultMoneta
WfnDefaultMonetaProspRiv
WfnDefaultMonetaStRivBeni
WfnDefaultPollici
WfnDefaultTestataRiv
WfnDopoCaseContab
WfnDopoCaseContabRiv
WfnDopoCaseDettRiv
WfnDopoCaseImpSost
WfnDopoCaseProspRiv
WfnDopoCaseTestataRiv
WfnElabImpostaSost
WfnFareReport
WfnGetRecordEvidenziato
WfnGetRegistrazioneRiv
WfnGetTipoContabilita
WfnInitImpostaSost
WfnInitProspRiv
WfnInizializzaQuose
WfnPreInitVars
WfnPrimoCaseContab
WfnPrimoCaseContabRiv
WfnPrimoCaseDettRiv
WfnPrimoCaseImpSost
WfnPrimoCaseProspRiv
WfnPrimoCaseTestataRiv
WfnRangeRegistrazioniPNCancellate
WfnRegistraRivse
WfnScrittureAmmortamenti
WfnScrittureContabRiv
WfnScrittureSpman
WfnStampaDettaglioImpostaSostitutiva
WfnStampaProspRiv
WfnUltimoStepContabRiv
WfnVistaRiv
Wfn_Controlli_Collegamenti_Da_Calcolo_Ammortamenti
WsbBufferToWin32
WsbCancellaReport
WsbChiudiReport
WsbGetFlagAmmortamenti
WsbGetParametriBns
WsbProgress_Init
WsbSetProgrammaBrowse
WsbSetTipoBene
WsbSettaAmbienteDaCacoloAmmortamenti
WsbTerminaQuose
WsbTipoModifica
rivseAcceptModifica
rivseAcceptPrima
rivseAcceptSelezione
rivseEvidenzia
rivseInizio
rivseSelezione

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39b45636650b336c7df9b0cae89bf267

Headers

File Characteristics

Imports

kernel32

user32

seatools

aisamwin32

sea32

seaaccregisw32

seasrvcon02w32

seasrvcon03w32

seasrvbns02w32

seabrowsesrv

seasrvuni01w32

seaconserlvw32

msvcrt

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 66KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 66KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 6KB