75583d5dde7701cceff3aac85a5fbef2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

75583d5dde7701cceff3aac85a5fbef2_JaffaCakes118
Size

100KB
MD5

75583d5dde7701cceff3aac85a5fbef2
SHA1

ad3901ccddb3557d556a5ac24d32787b90a625a0
SHA256

f1fb62bd129737ba451c36ba7d40aaf5210d7b644a2c769d4b3e85d5dfea43e7
SHA512

383bb97216182aa66b47f44789f063252f55790361ddd0bea5b292cb992039600f7ef26bb5f704d14433a2a2cc3d3b9b07337a1dee5123eea1085a5c5d4a5243
SSDEEP

1536:DfaIsUDFoQzNOTNx2cQyWT3rp3hm2YXCHkS4oyWKc0CWx:DSIDRoSNKlWTjbHR4o7Klrx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75583d5dde7701cceff3aac85a5fbef2_JaffaCakes118

Files

75583d5dde7701cceff3aac85a5fbef2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

54bbf3a27b656187b3323a6ef5117572

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLocalTime
SetLocalTime
Sleep
GetTickCount
CompareStringW
CompareStringA
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
GetStringTypeA
GetStringTypeW
SetFilePointer
VirtualAlloc
HeapReAlloc
IsBadWritePtr
RtlUnwind
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
UnhandledExceptionFilter
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
SetConsoleCtrlHandler
FlushFileBuffers
GetTimeZoneInformation
GetLocaleInfoW
CloseHandle
SetEnvironmentVariableA

user32

MessageBoxA

Exports

Exports

AddXmlAttributeLongField
AddXmlAttributeStrField
AddXmlDoubleField
AddXmlLongField
AddXmlStrData
AddXmlStrField
CloseXmlElement
CloseXmlElementWithAttributes
DecodeXMLFieldValue
EncodeXMLFieldValue
GetXmlDoubleField
GetXmlElement
GetXmlLongField
GetXmlStrField
StartXmlElement
StartXmlElementWithAttributes
WPFUNC_EFTStartSaleTicketProcess
WPFUNC_FP_get_check_status
WPFUNC_G_frame_3D
WPFUNC_G_get_comm_stat
WPFUNC_G_refresh
WPFUNC_MLimeApi
WPFUNC_MessageBoxM
WPFUNC_activate_optr
WPFUNC_add_2_EJ_file
WPFUNC_add_2_Rcpt_EJ_file
WPFUNC_add_check_digit
WPFUNC_bazz
WPFUNC_check_card_as_clubcard
WPFUNC_check_cut
WPFUNC_check_timer_task
WPFUNC_clear_comm_msg_buffer
WPFUNC_close_comm
WPFUNC_cust_disp_bal_due
WPFUNC_deactivate_optr
WPFUNC_delay_1ms
WPFUNC_direct_hook_transaction
WPFUNC_disp_start_of_ticket
WPFUNC_disp_ticket_total
WPFUNC_doc_print_line
WPFUNC_exe_cut
WPFUNC_ext_special_write_transaction
WPFUNC_force_check_eject
WPFUNC_force_write_comm
WPFUNC_get_clubcard
WPFUNC_get_comm_msg
WPFUNC_get_comm_stat
WPFUNC_get_global
WPFUNC_get_global_value
WPFUNC_get_mcr_tracks
WPFUNC_get_prog_voucher_data
WPFUNC_get_scheme_clubcard
WPFUNC_get_tax
WPFUNC_hook_transaction
WPFUNC_init
WPFUNC_insert_document
WPFUNC_is_key_hit
WPFUNC_is_key_or_scanner_or_mcr
WPFUNC_on_line_alert_transaction
WPFUNC_open_comm
WPFUNC_open_drawer
WPFUNC_points_transaction
WPFUNC_ppm_att_ldsply
WPFUNC_ppm_doc_print_messages
WPFUNC_print_more
WPFUNC_rcv_comm
WPFUNC_reset_last_sale
WPFUNC_restore_printer_device_format
WPFUNC_save_printer_device_format
WPFUNC_sell_credit_plu
WPFUNC_sell_plu_dep
WPFUNC_sell_trans_discount
WPFUNC_set_bar_code
WPFUNC_set_comm_task
WPFUNC_set_global
WPFUNC_set_global_value
WPFUNC_set_input_timeout
WPFUNC_set_mcr_tracks
WPFUNC_set_prototion_to_prom_table
WPFUNC_snd_comm
WPFUNC_special_write_transaction
WPFUNC_start_comm_timer
WPFUNC_start_pos_time
WPFUNC_stop_comm_timer
WPFUNC_system_entry
WPFUNC_system_key
WPFUNC_take_out_document
WPFUNC_ticket_frame_transaction
WPFUNC_void_credit_plu
WPFUNC_void_current_ticket
WPFUNC_write_mode_cmos
_dos_getdate
_dos_gettime
_dos_setdate
_dos_settime
a2i
a2l
ahextoi
bcd_2_int
bcd_2_long
bin6_2_ascii
check_desc
check_entered_date
check_general_timer
check_time_passed
chk_blank
close_general_timer
current_path
devide
fix_devide
fix_mp_mul_div
get_baud
get_bios_time
get_general_timer
get_rid_of_lead_blanks
get_rid_of_tail_blanks
i_sign_of
inc_bcd
int_2_bcd
l_sign_of
l_to_a0
long_2_bcd
mp_add
mp_mul_div
msg_box
open_general_timer
pak
regular_mp_mul_div
rnd_up_devide
round_up_mp_mul_div
sign_a2l
unpak
wait_ticks
write_date_to
write_time_to

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54bbf3a27b656187b3323a6ef5117572

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 57KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 16KB - Virtual size: 236KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 60KB - Virtual size: 57KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 16KB - Virtual size: 236KB

.reloc
Size: 8KB - Virtual size: 4KB