c17f55d288b02e3505b42b84617ea7f3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c17f55d288b02e3505b42b84617ea7f3_JaffaCakes118
Size

99KB
MD5

c17f55d288b02e3505b42b84617ea7f3
SHA1

1d42ecb504fad880a4f97e10b12d7bbf6c1392e6
SHA256

5831d89bc446a14c7cf7d91d93bcc5efa8d7dad3acba890a66d3e287363f72d5
SHA512

03caa9c61e723c8f0ce0206f5bca5e20796eca4349ca310d8ad1d6e919e68d516a54bf9491f81d2db33bcb818ee0f1f28cc2d52dc6e64642d8e57ead30c685eb
SSDEEP

1536:WevutjAtpyt+XftIqxjyTbie7JDmTqJXCXA3eBKnZIB6hmRs+QsguH:WevutjALyVXrJDmTIwgnf4Rs+yuH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c17f55d288b02e3505b42b84617ea7f3_JaffaCakes118

Files

c17f55d288b02e3505b42b84617ea7f3_JaffaCakes118
.dll windows:1 windows x86 arch:x86

56161586316f0caf17da72b87e678c88

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

core

StrP_BEGIN
StrUtil_BEGIN
Core_PrStrPic
Core_StrPic
Core_ViewStr
Core_PrBCDPic
Core_ViewBCD
Core_InputRBCD
Core_SetHLine
Core_FindIndex
Core_Str_Trim
Core_UI_ClrEOL
Core_GetPicture
Core_Str_Concat
Core_MemRead
Core_ClearFile
Core_OpenIndex
Core_OpenFile
Core_SearchCode
Core_RealPic
Core_CheckReadRec
Core_Message
Core_OmitDosDay
Core_CloseINXMenu
Core_GetINXKey
Core_SearchINX
Core_OpenINXMenu
Core_SetINXExitKeys
Core_NextIndex
Core_OmitDosMonth
Core_SearchRec
Core_FindRec
Core_WrStr
Core_UI_GotoXY
Core_InputSel
Core_InputStr
Core_InputLBCD
Core_ViewAll
Core_CloseWindow
Core_CloseInput
Core_RemoveHelp
Core_FileUnlock
Core_CloseMenu
Core_Choose
Core_AddRec
Core_WriteRec
Core_Choice
Core_GetLastKey
Core_Input
Core_OpenMenu
Core_NextRec
Core_ResetIndex
Core_WriteLock
Core_AddEscapeKey
Core_ClearEscapeKeys
Core_InputView
Core_Str_Press
Core_InputScrollStr
Core_SetMask
Core_OpenInput
Core_UI_SetWindowTitle
Core_OpenWindow
Core_Str_SpaceFill
Core_BCDPic
Core_WrCHelpLine
Core_ActionExceptionHandler
CoreVars_BEGIN
Core_ActionHALT
CoreVars_ActionRetCode
Core_SetActionDesc
Core_PutCHelpLine
Core_Str_CompareCWI
Core_Str_AppendC
RField_BEGIN
Core_Str_MulC
Core_BCDToStr
Core_Str_IsEmpty
Core_EmptyBCD
Core_DosDatePic
Core_SpaceBCD
Core_Str_Trunc
Core_FindParameter
Core_GetItem
Core_Str_Expand
Core_Str_Append
Core_Str_Copy
Core_GetItemsSize
Core_Str_Insert
Core_Str_Length
Core_Str_Compare
Core_SelPic
CoreDef_BEGIN
Core_BEGIN

xds25m

X2C_setjmp
X2C_XREMOVE
X2C_XOFF
X2C_XInitHandler
X2C_STRCMP_PROC
X2C_MODULEDLL
X2C_InitFPP
X2C_HISTORY_REG
X2C_HISTORY_ON
X2C_FINALDLL
X2C_EXIT_PROFILER
X2C_EXIT_HISTORY
X2C_EXITDLL
X2C_DISABLE_COMPONENT
X2C_BEGINDLL

Exports

Exports

AAConvS_BEGIN
AACpUtf8_BEGIN
AAFClear_BEGIN
AAKClear_BEGIN
AAMem_BEGIN
AAPFilt_BEGIN
AAPSrch_BEGIN
AAPValid_BEGIN
AAParam_BEGIN
AAPosS_BEGIN
AARClear_BEGIN
AARec_BEGIN
AASApp_BEGIN
AASCim_BEGIN
AASConv_BEGIN
AASFilt_BEGIN
AASProc_BEGIN
AASSubst_BEGIN
AASelP2D_BEGIN
AAStr_BEGIN
AATab_BEGIN
ALDevG2_BEGIN
A_Const_BEGIN
ActionInit
ActionStart
Action_BEGIN
B2_DEF04_BEGIN
B2_DEF04_DoAction
BSzFP_BEGIN
B_StKarb_BEGIN
B_SzemSz_BEGIN
BerUtil_BEGIN
BuildID_BEGIN
Const_BEGIN
CpUtil_BEGIN
CspKonv_BEGIN
DynPtr_BEGIN
F_BankSz_BEGIN
F_Ber04_BEGIN
F_Ber2_BEGIN
F_Ber3_BEGIN
F_Ber4_BEGIN
F_Ber93_BEGIN
F_Ber_BEGIN
F_DevNem_BEGIN
F_FKPar_BEGIN
F_SzemSz_BEGIN
F_SzemSzja_BEGIN
FileCP_BEGIN
IdoUtil_BEGIN
LongDate_BEGIN
PCF2All_BEGIN
P_Jogcim_BEGIN
P_SzVez_BEGIN
P_Tema_BEGIN
PostITLg_BEGIN
SEQArg_BEGIN
SYUpdat_BEGIN
SZJATipus_BEGIN
Ses_BEGIN
SyConvIn_BEGIN
SyUpdDBFIn_BEGIN
SyUpdIEInp_BEGIN
Text_BEGIN
Util_BEGIN
_AgKBes_BEGIN
_Alloman_BEGIN
_BerSzem_BEGIN
_DrillDw_BEGIN
_FEOR_BEGIN
dBase_BEGIN

Sections

.text
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

56161586316f0caf17da72b87e678c88

Headers

File Characteristics

Imports

core

xds25m

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 24KB

.data Size: 40KB - Virtual size: 40KB

.bss Size: 21KB - Virtual size: 24KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 2KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 4KB

.debug Size: 512B - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 24KB

.data
Size: 40KB - Virtual size: 40KB

.bss
Size: 21KB - Virtual size: 24KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 2KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 4KB

.debug
Size: 512B - Virtual size: 4KB