8728296ade2d35e965f8fc29bb75f3d2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8728296ade2d35e965f8fc29bb75f3d2_JaffaCakes118
Size

276KB
MD5

8728296ade2d35e965f8fc29bb75f3d2
SHA1

1270277e81314dd4e1c8c0a5d27b265dfb6e374e
SHA256

56f7c479b5c819177600772aed5b0358c7a0d9404f409adcb437754c2eb3ac06
SHA512

0adb3698e9bdcf8bd3263c571b80cf16ae757f66ccd16df157a62b1887664d534750d0773b4150fe5a578fbe0c7ea4c43926e92f23a2f94c17c8075a91c7ac6a
SSDEEP

6144:07JPCUcw1IRMn1GlyCs/dxjT5EDoYIE7bMzy/nb3i2oWitds:0FPCUPCMnkw1dxv5InrbM+/b3i2oBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8728296ade2d35e965f8fc29bb75f3d2_JaffaCakes118

Files

8728296ade2d35e965f8fc29bb75f3d2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3d9bce342972aba078cbb3538ab45bde

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

zlm

s2GetJob
zlmInitializeMonitorEx
zlmInitializePrintMonitor
zlmOpenPortEx

kernel32

GetModuleFileNameA
DebugBreak
SetLastError
Sleep
CloseHandle
ReadFile
GetFileSize
CreateFileA
GetSystemDirectoryA
GetLocalTime
OutputDebugStringA
GetCurrentThreadId
CreateEventA
InitializeCriticalSection
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
ResetEvent
CreateThread
CreateProcessA
DuplicateHandle
GetCurrentProcess
CreatePipe
WriteFile
GetLastError
SetEvent
InterlockedDecrement
InterlockedIncrement
OpenEventA
GetExitCodeProcess
OpenProcess
MapViewOfFile
OpenFileMappingA
UnmapViewOfFile
WaitForMultipleObjects
GetTickCount
TerminateThread
GetLocaleInfoW
SetStdHandle
GetLocaleInfoA
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetModuleHandleW
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
ExitProcess
VirtualAlloc
TerminateProcess
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetProcAddress
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
FlushFileBuffers

ws2_32

htons
htonl

winspool.drv

SetPrinterDataA
GetPrinterDataA
SetPrinterA
OpenPrinterA
SetJobA
ClosePrinter

Exports

Exports

InitializeMonitorEx
InitializePrintMonitor

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 192KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3d9bce342972aba078cbb3538ab45bde

Headers

File Characteristics

Imports

zlm

kernel32

ws2_32

winspool.drv

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 192KB - Virtual size: 196KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 192KB - Virtual size: 196KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB