12e98da1dbc3bc92cab664c2e149f400_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

12e98da1dbc3bc92cab664c2e149f400_JaffaCakes118
Size

652KB
MD5

12e98da1dbc3bc92cab664c2e149f400
SHA1

95a32a5161a68f398137a9208f6a1032c3e9b3dc
SHA256

16947a6d048e41da2f818f75f958e61c77e7e15f612e2091a086b6298914ed8c
SHA512

9f409f612bb0805b9fb4af3cf6bfdd09534710245a60bcd7b7135fecdd879de6b53cb3ad0eef9a03eb27f382ad2a5ebb9c25d2c994d87171c28d5b770b21d675
SSDEEP

12288:3VQmogCegJXrPVats8huIgX8lysnHJhjROyxpVis1LLD:3VSgCFlhosXsAsphjROyMs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12e98da1dbc3bc92cab664c2e149f400_JaffaCakes118

Files

12e98da1dbc3bc92cab664c2e149f400_JaffaCakes118
.exe windows:4 windows x86 arch:x86

707dbb11a03ad85c82a63a2a935cb961

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\User\Desktop\2003\Bindscrb\Release\BINDSCRB.pdb

Imports

kernel32

FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetConsoleCtrlHandler
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
GetStdHandle
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
FatalAppExitA
InterlockedExchange
HeapSize
HeapReAlloc
CreateThread
ExitThread
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
LocalLock
LocalUnlock
SetErrorMode
lstrcpynW
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetCurrentDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
InterlockedIncrement
GetCurrentThread
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
lstrcmpA
GetProfileIntA
GetTickCount
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GlobalGetAtomNameA
GlobalAddAtomA
GetModuleHandleA
GetProcAddress
FreeResource
SetLastError
GlobalFree
CopyFileA
FindResourceA
LoadResource
LockResource
SizeofResource
MulDiv
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
GetCurrentThreadId
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiW
lstrlenW
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetTimeZoneInformation

user32

GetDialogBaseUnits
DestroyIcon
GetTabbedTextExtentA
SendNotifyMessageA
MessageBeep
DestroyCursor
SetCursorPos
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
WindowFromDC
InSendMessage
ValidateRect
ShowOwnedPopups
RegisterClipboardFormatA
PostQuitMessage
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
IsZoomed
RedrawWindow
TranslateMDISysAccel
DrawMenuBar
DefFrameProcA
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
KillTimer
SetTimer
SetRect
ClipCursor
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
ScrollWindowEx
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
MessageBoxA
LockWindowUpdate
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetClientRect
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
RegisterClassA
UnregisterClassA
SetWindowPlacement
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
RegisterWindowMessageA
wsprintfA
LoadMenuA
GetClassNameA
SetWindowPos
WinHelpA
SetFocus
EqualRect
GetDlgItem
GetKeyState
GetDlgCtrlID
GetMenu
UnpackDDElParam
ReuseDDElParam
LoadIconA
GetClassInfoA
LoadAcceleratorsA
SetActiveWindow
CharLowerA
CharLowerW
CharUpperA
CharUpperW
LoadStringW
EnableWindow
UpdateWindow
SetRectEmpty
InflateRect
IntersectRect
InvalidateRect
GetCapture
SetCapture
ReleaseCapture
IsWindowVisible
IsIconic
InsertMenuItemA
CreatePopupMenu
OffsetRect
BringWindowToTop
SetMenu
ShowWindow
GetWindow
IsWindowEnabled
TranslateAcceleratorA
IsWindow
GetWindowRect
PtInRect
SetWindowLongA
IsClipboardFormatAvailable
GetDCEx
UnionRect
MapVirtualKeyA
GetKeyNameTextA
GetSystemMetrics
GetSysColor
GetDC
ReleaseDC
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetMenuItemInfoA
GetSysColorBrush
SetWindowRgn
DrawIcon
TrackPopupMenuEx
FindWindowA
DestroyMenu
PeekMessageA
CopyAcceleratorTableA
CreateMenu
CopyRect
GetParent
PostThreadMessageA
GetWindowLongA
ClientToScreen
SendMessageA
ScreenToClient
PostMessageA
GetActiveWindow
WindowFromPoint
GetLastActivePopup
GetFocus
LoadCursorA
SetCursor
GetDesktopWindow
GetWindowThreadProcessId
GetCursorPos
TranslateMessage
DispatchMessageA
GetMessageA
WaitMessage
DefMDIChildProcA

gdi32

ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
GetStockObject
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
StartPage
EndPage
GetCurrentPositionEx
AbortDoc
EndDoc
PatBlt
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
GetViewportOrgEx
Rectangle
CreateEllipticRgn
Ellipse
UnrealizeObject
GetWindowOrgEx
GetTextAlign
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetTextFaceA
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetAbortProc
CreatePen
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetTextExtentPoint32A
GetBkColor
SetBrushOrgEx
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
GetObjectA
CreateFontA
GetCharWidthA
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
StretchDIBits
DeleteDC
CreateDCA
CopyMetaFileA
GetTextMetricsA
LPtoDP
DPtoLP
CreateFontIndirectA
GetDeviceCaps
SetTextCharacterExtra

comdlg32

ReplaceTextA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
FindTextA
PageSetupDlgA
CommDlgExtendedError
PrintDlgA

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteValueA
RegSetValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

DragQueryFileA
ExtractIconA
SHGetFileInfoA
DragFinish

comctl32

ImageList_Draw
ImageList_GetImageInfo
ord17
ord13
ImageList_Read
ImageList_Write
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleIsRunning
CreateFileMoniker
GetRunningObjectTable
OleRun
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
OleGetClipboard
CoGetClassObject
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleSave
OleLockRunning
OleSetContainedObject
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateFromFile
OleCreateLinkToFile
OleCreate
OleLoad
OleGetIconOfClass
StgOpenStorageOnILockBytes
GetHGlobalFromILockBytes
DoDragDrop
OleSetMenuDescriptor
CoGetMalloc
OleQueryLinkFromData
CoCreateInstance
StringFromGUID2
CLSIDFromString
CLSIDFromProgID
OleUninitialize
CoRevokeClassObject
CoRegisterClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateGenericComposite
CreateItemMoniker
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateDataAdviseHolder
CreateOleAdviseHolder
CoDisconnectObject
OleRegGetMiscStatus
OleRegEnumVerbs
OleInitialize
OleQueryCreateFromData
CoFreeUnusedLibraries

oleaut32

SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysStringByteLen
SysStringLen
SysAllocStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
SysReAllocStringLen
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
LoadTypeLi
VarDateFromStr

Exports

Exports

fVmdCCcDvcPBxed

Sections

.text
Size: 408KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

707dbb11a03ad85c82a63a2a935cb961

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Exports

Exports

Sections

.text Size: 408KB - Virtual size: 404KB

.rdata Size: 124KB - Virtual size: 121KB

.data Size: 76KB - Virtual size: 88KB

.rsrc Size: 40KB - Virtual size: 37KB

.text
Size: 408KB - Virtual size: 404KB

.rdata
Size: 124KB - Virtual size: 121KB

.data
Size: 76KB - Virtual size: 88KB

.rsrc
Size: 40KB - Virtual size: 37KB