Overview

overview

3

Static

static

3

DELETE.bat

windows7-x64

1

DELETE.bat

windows10-2004-x64

1

ch01/DELETE.bat

windows7-x64

1

ch01/DELETE.bat

windows10-2004-x64

1

ch02/DELETE.bat

windows7-x64

1

ch02/DELETE.bat

windows10-2004-x64

1

ch03/DELETE.bat

windows7-x64

1

ch03/DELETE.bat

windows10-2004-x64

1

ch04/4_02IntoDemo

macos-10.15-amd64

1

ch04/4_02IntoDemo.o

macos-10.15-amd64

1

ch04/DELETE.bat

windows7-x64

1

ch04/DELETE.bat

windows10-2004-x64

1

ch05/DELETE.bat

windows7-x64

1

ch05/DELETE.bat

windows10-2004-x64

1

ch07/DELETE.bat

windows7-x64

1

ch07/DELETE.bat

windows10-2004-x64

1

ch08/DELETE.bat

windows7-x64

1

ch08/DELETE.bat

windows10-2004-x64

1

ch09/DELETE.bat

windows7-x64

1

ch09/DELETE.bat

windows10-2004-x64

1

ch10/DELETE.bat

windows7-x64

1

ch10/DELETE.bat

windows10-2004-x64

1

ch13/DELETE.bat

windows7-x64

1

ch13/DELETE.bat

windows10-2004-x64

1

ch15/DELETE.bat

windows7-x64

1

ch15/DELETE.bat

windows10-2004-x64

1

ch15/Delph...ct.exe

windows7-x64

3

ch15/Delph...ct.exe

windows10-2004-x64

3

ch15/Delph...LD.bat

windows7-x64

1

ch15/Delph...LD.bat

windows10-2004-x64

1

ch15/Delph...ct.exe

windows7-x64

3

ch15/Delph...ct.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0390804f7662d0d38837dbcc59729f0_JaffaCakes118

  • Size

    1.2MB

  • MD5

    a0390804f7662d0d38837dbcc59729f0

  • SHA1

    aecc8ba0004b5c91a3bae4c0e3d7621648994e73

  • SHA256

    313d8fcdde3cf6cf6e966755ceba5e8e45a8108e6d680b31fee1dd2100e0ebf0

  • SHA512

    2537f1dc0b665edd7286c4c17bb2cd4bc533065dd7f1e15f2594d24e757d1fff5da9abffc05f2aac47855af3a97d450bf95894cabd69bdedc9d76e1407610db9

  • SSDEEP

    24576:7asgn37ES5/puIxckee5NAbHv9TJw75M4EajHgOmRmsLZagqa2P5x:7aPn37EWvee5NAbHv9ae4BctDLqtPX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • a0390804f7662d0d38837dbcc59729f0_JaffaCakes118
    .zip
  • DELETE.BAT
  • ch01/1_01HelloWorld.hla
  • ch01/1_01HelloWorld.pdb
  • ch01/1_02DemoVars.hla
  • ch01/1_02DemoVars.pdb
  • ch01/1_03DemoMOVaddSUB.hla
  • ch01/1_03DemoMOVaddSUB.pdb
  • ch01/1_04NumsInColumns.hla
  • ch01/1_04NumsInColumns.pdb
  • ch01/1_05NumsInColumns2.hla
  • ch01/1_05NumsInColumns2.pdb
  • ch01/1_06charInput.hla
  • ch01/1_06charInput.pdb
  • ch01/1_07intInput.hla
  • ch01/1_07intInput.pdb
  • ch01/1_08TestBadInput.hla
  • ch01/1_08TestBadInput.pdb
  • ch01/1_09TestBadInput2.hla
  • ch01/1_09TestBadInput2.pdb
  • ch01/1_10TestBadInput3.hla
  • ch01/1_10TestBadInput3.pdb
  • ch01/1_11TestBadInput4.hla
  • ch01/1_11TestBadInput4.pdb
  • ch01/DELETE.BAT
  • ch01/makefile
  • ch02/2_01ConvertToHex.hla
  • ch02/2_01ConvertToHex.pdb
  • ch02/2_02ConvertToDecimal.hla
  • ch02/2_02ConvertToDecimal.pdb
  • ch02/2_03ConvertToDecimal2.hla
  • ch02/2_03ConvertToDecimal2.pdb
  • ch02/2_04HexIO.hla
  • ch02/2_04HexIO.pdb
  • ch02/2_05LogicalOp.hla
  • ch02/2_05LogicalOp.pdb
  • ch02/2_06twosComplement.hla
  • ch02/2_06twosComplement.pdb
  • ch02/2_07UnsExample.hla
  • ch02/2_07UnsExample.pdb
  • ch02/2_08signExtension.hla
  • ch02/2_08signExtension.pdb
  • ch02/2_09dateDemo.hla
  • ch02/2_09dateDemo.pdb
  • ch02/2_10charInputDemo.hla
  • ch02/2_10charInputDemo.pdb
  • ch02/2_11charInputDemo2.hla
  • ch02/2_11charInputDemo2.pdb
  • ch02/2_12eolnDemo.hla
  • ch02/2_12eolnDemo.pdb
  • ch02/DELETE.BAT
  • ch02/makefile
  • ch03/3_01adrsExpressions.hla
  • ch03/3_01adrsExpressions.pdb
  • ch03/DELETE.BAT
  • ch03/makefile
  • ch04/4_01BoundDemo.hla
  • ch04/4_01BoundDemo.pdb
  • ch04/4_02INTOdemo.hla
  • ch04/4_02INTOdemo.pdb
  • ch04/4_02IntoDemo
    .macho macos arch:x86
  • ch04/4_02IntoDemo.asm.s
  • ch04/4_02IntoDemo.o
    .o macos arch:x86
  • ch04/4_03ConstDemo.hla
  • ch04/4_03ConstDemo.pdb
  • ch04/4_04VALdemo.hla
  • ch04/4_04VALdemo.pdb
  • ch04/4_05PtrConstDemo.hla
  • ch04/4_05PtrConstDemo.pdb
  • ch04/4_06UninitPtrDemo.hla
  • ch04/4_06UninitPtrDemo.pdb
  • ch04/4_07BadTypePtrDemo.hla
  • ch04/4_07BadTypePtrDemo.pdb
  • ch04/4_08StrDemo.hla
  • ch04/4_08StrDemo.pdb
  • ch04/4_09LenMaxlenDemo.hla
  • ch04/4_09LenMaxlenDemo.pdb
  • ch04/4_10strallocDemo.hla
  • ch04/4_10strallocDemo.pdb
  • ch04/4_11strfreeDemo.hla
  • ch04/4_11strfreeDemo.pdb
  • ch04/4_12strfreeDemo2.hla
  • ch04/4_12strfreeDemo2.pdb
  • ch04/4_13strRefAssignDemo.hla
  • ch04/4_13strRefAssignDemo.pdb
  • ch04/4_14strcpyDemo.hla
  • ch04/4_14strcpyDemo.pdb
  • ch04/4_15stra_cpyDemo.hla
  • ch04/4_15stra_cpyDemo.pdb
  • ch04/4_16strcatDemo.hla
  • ch04/4_16strcatDemo.pdb
  • ch04/DELETE.BAT
  • ch04/makefile
  • ch05/5_01zeroBytesDemo.hla
  • ch05/5_01zeroBytesDemo.pdb
  • ch05/5_02nonWorkingProgram.hla
  • ch05/5_02nonWorkingProgram.pdb
  • ch05/5_03callerPreservation.hla
  • ch05/5_03callerPreservation.pdb
  • ch05/5_04callerPreservation2.hla
  • ch05/5_04callerPreservation2.pdb
  • ch05/5_05demoGlobalScope.hla
  • ch05/5_05demoGlobalScope.pdb
  • ch05/5_06demoLocalVar.hla
  • ch05/5_06demoLocalVar.pdb
  • ch05/5_07demoLocalVars2.hla
  • ch05/5_07demoLocalVars2.pdb
  • ch05/5_08PassByRefDemo.hla
  • ch05/5_08PassByRefDemo.pdb
  • ch05/5_09qsDemo.hla
  • ch05/5_09qsDemo.pdb
  • ch05/5_10missingRET.hla
  • ch05/5_10missingRET.pdb
  • ch05/5_11extraPOP.hla
  • ch05/5_11extraPOP.pdb
  • ch05/5_12printDemo.hla
  • ch05/5_12printDemo.pdb
  • ch05/5_13AccValueParm.hla
  • ch05/5_13AccValueParm.pdb
  • ch05/5_14manValueParms.hla
  • ch05/5_14manValueParms.pdb
  • ch05/5_15PassingExpr.hla
  • ch05/5_15PassingExpr.pdb
  • ch05/5_16AccRefParm.hla
  • ch05/5_16AccRefParm.pdb
  • ch05/5_17AccRefArray.hla
  • ch05/5_17AccRefArray.pdb
  • ch05/5_18stdlib.hhf
  • ch05/5_19UNIT1.HLA
  • ch05/5_20MAIN.HLA
  • ch05/5_21MAIN2.HLA
  • ch05/5_21MAIN2.pdb
  • ch05/5_22UNIT2.HLA
  • ch05/DELETE.BAT
  • ch05/makefile
  • ch07/7_01labelDemo.hla
  • ch07/7_01labelDemo.pdb
  • ch07/7_02labelArrays.hla
  • ch07/7_02labelArrays.pdb
  • ch07/7_03regIndJmp.hla
  • ch07/7_03regIndJmp.pdb
  • ch07/7_04memIndJmp.hla
  • ch07/7_04memIndJmp.pdb
  • ch07/DELETE.BAT
  • ch07/makefile
  • ch08/8_01SimpleFileOutput.hla
  • ch08/8_01SimpleFileOutput.pdb
  • ch08/8_02SimpleFileInput.hla
  • ch08/8_02SimpleFileInput.pdb
  • ch08/8_03SimpleFileInput2.hla
  • ch08/8_03SimpleFileInput2.pdb
  • ch08/8_04AppendDemo.hla
  • ch08/8_04AppendDemo.pdb
  • ch08/8_05EolnDemo.hla
  • ch08/8_05EolnDemo.pdb
  • ch08/8_06RandomAccessDemo.hla
  • ch08/8_06RandomAccessDemo.pdb
  • ch08/8_07TruncateDemo.hla
  • ch08/8_07TruncateDemo.pdb
  • ch08/DELETE.BAT
  • ch08/makefile
  • ch09/9_01TestMul64.hla
  • ch09/9_01TestMul64.pdb
  • ch09/9_02testDiv128.hla
  • ch09/9_02testDiv128.pdb
  • ch09/9_03testDiv128b.hla
  • ch09/9_03testDiv128b.pdb
  • ch09/9_04out128.hla
  • ch09/9_04out128.pdb
  • ch09/9_05xin128.hla
  • ch09/9_05xin128.pdb
  • ch09/9_06uin128.hla
  • ch09/9_06uin128.pdb
  • ch09/9_07MixedArith.hla
  • ch09/9_07MixedArith.pdb
  • ch09/9_08genSines.hla
  • ch09/9_08genSines.pdb
  • ch09/DELETE.BAT
  • ch09/makefile
  • ch09/sines.hla
  • ch10/10_01ctlHW.hla
  • ch10/10_01ctlHW.pdb
  • ch10/10_02ctWhile.hla
  • ch10/10_02ctWhile.pdb
  • ch10/10_03ctWhile2.hla
  • ch10/10_03ctWhile2.pdb
  • ch10/10_04putiDemo.hla
  • ch10/10_04putiDemo.pdb
  • ch10/10_05put32Demo.hla
  • ch10/10_05put32Demo.pdb
  • ch10/10_06puti32Demo.hla
  • ch10/10_06puti32Demo.pdb
  • ch10/10_07demoSines.hla
  • ch10/10_07demoSines.pdb
  • ch10/10_08demoCase.hla
  • ch10/10_08demoCase.pdb
  • ch10/DELETE.BAT
  • ch10/makefile
  • ch13/13_01cscpy.hla
  • ch13/13_02csdiff.hla
  • ch13/13_03upperCase.hla
  • ch13/13_03upperCase.pdb
  • ch13/DELETE.BAT
  • ch13/makefile
  • ch15/15_01emitDemo.hla
  • ch15/15_02offsetDemo.hla
  • ch15/15_03MasmDemo1.hla
  • ch15/15_04masmUpper.masm
  • ch15/15_19c.c
  • ch15/15_20c.hla
  • ch15/DELETE.BAT
  • ch15/DelphiEx1/CalledFromDelphi.hla
  • ch15/DelphiEx1/DelphEx1Project.cfg
  • ch15/DelphiEx1/DelphEx1Project.dof
  • ch15/DelphiEx1/DelphEx1Project.dpr
  • ch15/DelphiEx1/DelphEx1Project.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ch15/DelphiEx1/DelphEx1Project.res
  • ch15/DelphiEx1/DelphiEx1.dcu
  • ch15/DelphiEx1/DelphiEx1.dfm
  • ch15/DelphiEx1/DelphiEx1.pas
  • ch15/DelphiEx1/calledfromdelphi.OBJ
  • ch15/DelphiEx2/BUILD.BAT
  • ch15/DelphiEx2/DelphiEx2.dcu
  • ch15/DelphiEx2/DelphiEx2.dfm
  • ch15/DelphiEx2/DelphiEx2.pas
  • ch15/DelphiEx2/DelphiEx2Project.cfg
  • ch15/DelphiEx2/DelphiEx2Project.dof
  • ch15/DelphiEx2/DelphiEx2Project.dpr
  • ch15/DelphiEx2/DelphiEx2Project.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ch15/DelphiEx2/DelphiEx2Project.res
  • ch15/DelphiEx2/ReturnBoolean.hla
  • ch15/DelphiEx2/ReturnDWord.hla
  • ch15/DelphiEx2/ReturnPtr.hla
  • ch15/DelphiEx2/ReturnWord.hla
  • ch15/DelphiEx2/Returnreal.hla
  • ch15/DelphiEx2/returnboolean.obj
  • ch15/DelphiEx2/returndword.obj
  • ch15/DelphiEx2/returnptr.obj
  • ch15/DelphiEx2/returnreal.obj
  • ch15/DelphiEx2/returnword.obj
  • ch15/DelphiEx3/DelphiEx3.dcu
  • ch15/DelphiEx3/DelphiEx3.dfm
  • ch15/DelphiEx3/DelphiEx3.pas
  • ch15/DelphiEx3/DelphiEx3Project.cfg
  • ch15/DelphiEx3/DelphiEx3Project.dof
  • ch15/DelphiEx3/DelphiEx3Project.dpr
  • ch15/DelphiEx3/DelphiEx3Project.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ch15/DelphiEx3/DelphiEx3Project.res
  • ch15/DelphiEx3/UsesPascal.hla
  • ch15/DelphiEx4/DelphiEx3.dcu
  • ch15/DelphiEx4/DelphiEx4.dcu
  • ch15/DelphiEx4/DelphiEx4.dfm
  • ch15/DelphiEx4/DelphiEx4.pas
  • ch15/DelphiEx4/DelphiEx4Project.cfg
  • ch15/DelphiEx4/DelphiEx4Project.dof
  • ch15/DelphiEx4/DelphiEx4Project.dpr
  • ch15/DelphiEx4/DelphiEx4Project.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ch15/DelphiEx4/DelphiEx4Project.res
  • ch15/DelphiEx4/UsesRegister.hla
  • ch15/DelphiEx5/DelphiEx5.dcu
  • ch15/DelphiEx5/DelphiEx5.dfm
  • ch15/DelphiEx5/DelphiEx5.pas
  • ch15/DelphiEx5/DelphiEx5Project.cfg
  • ch15/DelphiEx5/DelphiEx5Project.dof
  • ch15/DelphiEx5/DelphiEx5Project.dpr
  • ch15/DelphiEx5/DelphiEx5Project.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ch15/DelphiEx5/DelphiEx5Project.res
  • ch15/DelphiEx5/TableData.hla
  • ch15/DelphiEx5/tabledata.link
  • makefile