45db59c274cb40ae5e71f5818002ddf8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

45db59c274cb40ae5e71f5818002ddf8_JaffaCakes118
Size

91KB
MD5

45db59c274cb40ae5e71f5818002ddf8
SHA1

c11f7ab8f9420647eca36e0460bdbb54053a50fc
SHA256

6319061ec5f98784d0ed48f3955832d5bedb51a712ab43ab9e880de82e5e8437
SHA512

26c505f225616b934ade18424bd134d33eba261e62db62aa7d06a71bcc85044e8126bb0099eeec8d40886c54c93a12fd811d14a28050fb8f7b3199f913b38964
SSDEEP

1536:r6Kh4daPzgL54u7xIRcZ3bDB4wAksd9yuT3a4u29/nKAol7Nng:r6e4g7gF7TZbDB4w7kT3a4u2yAol7K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45db59c274cb40ae5e71f5818002ddf8_JaffaCakes118

Files

45db59c274cb40ae5e71f5818002ddf8_JaffaCakes118
.dll windows:1 windows x86 arch:x86

30269c238c01040d3625df20e02cce4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

core

Core_MoveMem
Core_WrLn
Core_WrStr
Core_UI_UseWindow
Core_UI_GetUsedWindow
Core_UI_Bell
Core_ActionExceptionHandler
Core_DrawLine
Core_PrHeadTitle
Core_Str_Press
Core_Str_Insert
Core_RealPic
Core_Math_RoundPrec
Core_SelPic
Core_PrDosDate
Core_ClosePrinter
Core_PrinterExit
Core_SetHead
Core_OpenPrinter
Core_PrHalfLn
Core_PrRealPic
Core_GoTabField
Core_UseTabFields
Core_InitTabFields
Core_WrCHelpLine
Core_CompareMem
Core_RealToCard
Core_Math_Round
Core_DosDateToDays
Core_PrLn
Core_PrStr
Core_PrSpace
Core_UnformatField
Core_UI_SetWindowTitle
Core_OpenWindow
Core_PrStrPic
Core_StrPic
Core_Str_CompareCWI
Core_ViewStr
Core_InputStr
Core_InputLBCD
Core_PrBCDPic
Core_BCDPic
Core_Str_Compare
Core_ViewBCD
Core_InputRBCD
Core_OmitDosMonth
Core_NextIndex
Core_BCDToStr
Core_Str_IsEmpty
Core_Str_Delete
Core_Str_Trunc
Core_Str_Left
Core_RealFieldSize
Core_Str_Append
Core_OmitDosDay
Core_Run
Core_Choice
Core_NextRec
Core_DosDateToYMD
Core_Str_SpaceFill
Core_PrevRec
Core_ResetIndex
Core_SearchRec
Core_FindParameter
Core_GetPicture
Core_Str_Copy
Core_ALLOCATE
Core_Str_Length
Core_YMDToDosDate
Core_Str_Concat
Core_DosDatePic
Core_Message
Core_GetDosDate
Core_DaysToDosDate
Core_FindRec
Core_ClearFile
Core_OpenIndex
Core_OpenFile
Core_FindIndex
Core_AddRec
Core_EmptyBCD
CoreVars_BEGIN
Core_Str_Expand
Core_ActionHALT
CoreVars_ActionRetCode
Core_SetActionDesc
Core_PutCHelpLine
CoreDef_BEGIN
Core_BEGIN
Core_FillMem
Core_SpaceBCD

xds25m

X2C_setjmp
X2C_XREMOVE
X2C_XOFF
X2C_XInitHandler
X2C_STRCMP_PROC
X2C_MODULEDLL
X2C_InitFPP
X2C_HISTORY_REG
X2C_HISTORY_ON
X2C_FINALDLL
X2C_EXIT_PROFILER
X2C_EXIT_HISTORY
X2C_EXITDLL
X2C_DISABLE_COMPONENT
X2C_BEGINDLL

Exports

Exports

AARClear_BEGIN
ActionInit
ActionStart
Action_BEGIN
BuildID_BEGIN
Const_BEGIN
DynPtr_BEGIN
FGyujt_BEGIN
F_AFAVi_BEGIN
F_Datum_BEGIN
F_DevNem_BEGIN
F_FKPar_BEGIN
F_Ftetel_BEGIN
F_TKKart_BEGIN
P_CsopK_BEGIN
P_Fszam2_BEGIN
P_Fszam_BEGIN
P_Tema_BEGIN
Ses_BEGIN
TKMegj_BEGIN
TKUtil_BEGIN
TK_ELL_BEGIN
TK_ELL_DoAction
Util_BEGIN
_AFA_BEGIN
_Felad_BEGIN
_KSH_BEGIN
_SzSzam_BEGIN

Sections

.text
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30269c238c01040d3625df20e02cce4d

Headers

File Characteristics

Imports

core

xds25m

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 44KB

.data Size: 12KB - Virtual size: 16KB

.bss Size: 19KB - Virtual size: 20KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 1024B - Virtual size: 4KB

.reloc Size: 6KB - Virtual size: 8KB

.debug Size: 512B - Virtual size: 4KB

.text
Size: 41KB - Virtual size: 44KB

.data
Size: 12KB - Virtual size: 16KB

.bss
Size: 19KB - Virtual size: 20KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 1024B - Virtual size: 4KB

.reloc
Size: 6KB - Virtual size: 8KB

.debug
Size: 512B - Virtual size: 4KB