15e623f60b30d8b7f4bfcec295929348_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

15e623f60b30d8b7f4bfcec295929348_JaffaCakes118
Size

268KB
MD5

15e623f60b30d8b7f4bfcec295929348
SHA1

8ca9495a732b543ee1f0eb91270ac4b9eecba22c
SHA256

a80eb63d9c4f95d9c79d37c7bd6bd862cee086b9edea60c4d8c2cf059b6e8bf1
SHA512

b7e714e14dfc7c91982c2de3703561f9c9e2725a35eece5956c22674ab7d30c11bacbb884bed7a84131f42ecf9d58a66ba0dfddb7d6d75f058e1801d8d940923
SSDEEP

6144:VE39RaZHcZ4ZO0ujHqoTBsw/UeNkGU0juXZ:QRaZ9/ujHqxwMiup

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15e623f60b30d8b7f4bfcec295929348_JaffaCakes118

Files

15e623f60b30d8b7f4bfcec295929348_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c537b842ee7ec0eaf1e4e94d1c8ba953

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WritePrivateProfileStringA
GetPrivateProfileStringA
WinExec
GetTempPathA
GlobalDeleteAtom
GlobalAddAtomA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetCurrentThreadId
GetCurrentProcessId
GlobalAlloc
GlobalFree
FreeLibrary
GetProfileStringA
LoadLibraryA
WriteProfileStringA
lstrlenA
GetProfileIntA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetProcessHeap
GetVersion
GetVersionExA
LocalFree
LoadLibraryExA
LocalAlloc
GetPrivateProfileIntA
DeleteCriticalSection
InitializeCriticalSection
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetSystemDirectoryA
GetLocaleInfoA
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapCreate
HeapDestroy
HeapReAlloc
VirtualAlloc
VirtualFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
GetCommandLineA
GetFileAttributesA
CreateDirectoryA
ReadFile
WriteFile
CloseHandle
CreateFileA
EnterCriticalSection
LeaveCriticalSection
Sleep
DisableThreadLibraryCalls
DeviceIoControl
GetModuleHandleA
GetProcAddress
SetLastError
GetLastError

user32

TranslateMessage
PeekMessageA
wsprintfA
LoadStringA
MessageBeep
FindWindowA
SendMessageA
PostMessageA
GetActiveWindow
DispatchMessageA

winspool.drv

OpenPrinterA
PrinterProperties
DocumentPropertiesA
GetPrinterDataW
GetPrinterDataA
SetPrinterDataW
DeletePrinterConnectionA
ConnectToPrinterDlg
AbortPrinter
GetPrinterA
ClosePrinter
ConfigurePortA
DeletePortA
EnumMonitorsA
DeleteMonitorA
AddMonitorA
AddPortA
EnumPortsA
AddPrinterA
SetJobA
GetJobA
AddJobA
ScheduleJob
FindClosePrinterChangeNotification
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
EnumPrinterDriversA
GetPrinterDriverDirectoryA
DeletePrinterDriverA
GetPrinterDriverA
AddPrinterDriverA
ReadPrinter
WritePrinter
EndPagePrinter
StartPagePrinter
EndDocPrinter
StartDocPrinterA
SetPrinterA
EnumPrintersA
DeletePrinter
DeviceCapabilitiesA
AddPrintProcessorA
EnumPrintProcessorsA
EnumPrintProcessorDatatypesA
DeletePrintProcessorA
GetPrintProcessorDirectoryA
EnumJobsA
SetPrinterDataA

advapi32

RegDeleteKeyA
RegCloseKey
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
RegCreateKeyA
RegQueryInfoKeyA
RegEnumKeyA
GetUserNameA
RegDeleteValueA

Exports

Exports

AbortPrinter
AddJobA
AddMonitorA
AddPortA
AddPrintProcessorA
AddPrinterA
AddPrinterDriverA
ClosePrinter
ConfigurePortA
ConnectToPrinterDlg
DeleteMonitorA
DeletePortA
DeletePrintProcessorA
DeletePrinter
DeletePrinterConnectionA
DeletePrinterDataExA
DeletePrinterDriverA
DeletePrinterKeyA
DeviceCapabilitiesA
DeviceIoControl
DocumentPropertiesA
EndDocPrinter
EndPagePrinter
EnumJobsA
EnumMonitorsA
EnumPortsA
EnumPrintProcessorDatatypesA
EnumPrintProcessorsA
EnumPrinterDataExA
EnumPrinterDriversA
EnumPrinterKeyA
EnumPrintersA
FindClosePrinterChangeNotification
FindFirstPrinterChangeNotification
FindNextPrinterChangeNotification
GetJobA
GetPrintProcessorA
GetPrintProcessorDirectoryA
GetPrinterA
GetPrinterDataA
GetPrinterDataExA
GetPrinterDriverA
GetPrinterDriverDirectoryA
GetUserNameA
InitializeMonitorEx
IsProcessorFeaturePresent
OpenPrinterA
PrinterProperties
ReadPrinter
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
ScheduleJob
SetJobA
SetPrinterA
SetPrinterDataA
SetPrinterDataExA
StartDocPrinterA
StartPagePrinter
WritePrinter
ZSP_BrowseDialog
ZSP_ClosePrinter
ZSP_GetMonitor
ZSP_GetObjectType
ZSP_GetSharePath
ZSP_InitializeMonitor
ZSP_LoadDriverLibraryEx
ZSP_MakeSpoolFilePath
ZSP_OpenPrinterA
ZSP_ShareAsDialog
ZSP_StructCopy
s2ANSI
s2ByteLength
s2ClosePrinter
s2Disable
s2Enable
s2EnumLocalPrinterDrivers
s2EnumLocalPrinters
s2GetJob
s2GetModuleHandle
s2GetPrinter
s2GetPrinterData
s2GetPrinterDriver
s2IsJobCancelled
s2Native
s2OpenPrinter
s2Set
s2SetJob
s2SetPort
s2SetPrinterData
s2Something
s2StartDocPrinter
zlmGetControlInt
zlmGetControlString

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c537b842ee7ec0eaf1e4e94d1c8ba953

Headers

File Characteristics

Imports

kernel32

user32

winspool.drv

advapi32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 172KB - Virtual size: 171KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 172KB - Virtual size: 171KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 5KB