05f25ba1e420fa4bcaa57f7a6ba5f5b1_JaffaCakes118

General

Target

05f25ba1e420fa4bcaa57f7a6ba5f5b1_JaffaCakes118
Size

2.8MB
MD5

05f25ba1e420fa4bcaa57f7a6ba5f5b1
SHA1

1b99a69ec35e6b74c3a0eee6b6916659743b433c
SHA256

b553386f9bb39f7697a3967cbad2306764e7e3b9560609b4f3fe5c05f1aee3a8
SHA512

68eca8c2cbbadc561166ffd35ca31480bda80141098f7949cd04ca258350198fd7fb205042e89faddea2d36d8755f73979e35c8923371c93be245cd3cfbc6f36
SSDEEP

49152:bCWShwAqZLuk4g/arfcGUo648hubQlmsIC8PAcFFp6:bz1ZjYrfcGchuBsIC8PdF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05f25ba1e420fa4bcaa57f7a6ba5f5b1_JaffaCakes118

Files

05f25ba1e420fa4bcaa57f7a6ba5f5b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ChangeDir
ExecExtendFunc
ExecSqlCmd
GetCurUserID
GetCurUserName
GetCurrentDir
GetDataViewName
GetDirItemValue
GetMainFormHandle
GetMainViewHandle
GetMemValue
GetNewRecordID
GetSelectedID
GetSelectedValues
HaveThesePower
HistoryGo
LogMessage
ReadHisInput
RefreshDesk
RegistXFramerProc
ReportExec
SaveHisInput
SetDirItemAddit
SetDirItemValue
SetMemValue
UnRegistXFramerProc

Sections

CODE
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 60KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WYCao
Size: 817KB - Virtual size: 856KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 1.9MB - Virtual size: 1.9MB

DATA Size: 22KB - Virtual size: 22KB

BSS Size: - Virtual size: 60KB

.idata Size: 12KB - Virtual size: 12KB

.edata Size: 1024B - Virtual size: 684B

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 119KB - Virtual size: 119KB

.WYCao Size: 817KB - Virtual size: 856KB

CODE
Size: 1.9MB - Virtual size: 1.9MB

DATA
Size: 22KB - Virtual size: 22KB

BSS
Size: - Virtual size: 60KB

.idata
Size: 12KB - Virtual size: 12KB

.edata
Size: 1024B - Virtual size: 684B

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 119KB - Virtual size: 119KB

.WYCao
Size: 817KB - Virtual size: 856KB