3223e34fbf2620d0ad3de42317eaaf37_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3223e34fbf2620d0ad3de42317eaaf37_JaffaCakes118
Size

927KB
MD5

3223e34fbf2620d0ad3de42317eaaf37
SHA1

3624659b0fdd7f75a492018f394055c0d6457109
SHA256

a9fede5f740722dc6fb8109fcda7af0d98ac71679e773d2ba250785ab8e9b35f
SHA512

88d0a8e68bcbfa22a08e5bd08f908f74f2e8867d153646bda5ef56e7aa89f175abf23d4d894c51eccddcf52d81f6e895dc72d666ceb3c38302f9c8430b78df6d
SSDEEP

12288:X1BEJGPxruOs4WuYaY6SGmJjOsowV2wl5zF+SQKHr:X1BEJYuOs4WuYaPwjN2ub+SQer

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3223e34fbf2620d0ad3de42317eaaf37_JaffaCakes118

Files

3223e34fbf2620d0ad3de42317eaaf37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

948118c3b9564f26115165efb8d63fc7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

qtcored4

_Z13qFlagLocationPKc
_Z5qFreePv
_Z7qMemSetPvij
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_Z9qBadAllocv
_Z9qt_assertPKcS0_i
_ZN10QByteArray7reallocEi
_ZN11QVectorData10reallocateEPS_iii
_ZN11QVectorData4freeEPS_i
_ZN11QVectorData8allocateEii
_ZN5QTime11currentTimeEv
_ZN6QTimer5startEi
_ZN6QTimerC1EP7QObject
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyEPKc
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QString14fromWCharArrayEPKwi
_ZN7QString4freeEPNS_4DataE
_ZNK11QMetaObject2trEPKcS1_
_ZNK5QTime4hourEv
_ZNK5QTime6minuteEv
_ZNK5QTime6secondEv
_ZNK7QString11toLocal8BitEv

qtguid4

_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN6QBrushC1ERK6QColorN2Qt10BrushStyleE
_ZN6QBrushD1Ev
_ZN6QColor6setRgbEiiii
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10fontChangeERK5QFont
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QWidget11qt_metacastEPKc
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11styleChangeER6QStyle
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13enabledChangeEb
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13paletteChangeERK8QPalette
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14languageChangeEv
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16contextMenuEventEP17QContextMenuEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget16staticMetaObjectE
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget22windowActivationChangeEb
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget8winEventEP6tagMSGPl
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC2EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidgetD2Ev
_ZN8QPainter13setRenderHintENS_10RenderHintEb
_ZN8QPainter17drawConvexPolygonEPK6QPointi
_ZN8QPainter4saveEv
_ZN8QPainter5scaleEdd
_ZN8QPainter6rotateEd
_ZN8QPainter6setPenEN2Qt8PenStyleE
_ZN8QPainter6setPenERK6QColor
_ZN8QPainter7restoreEv
_ZN8QPainter8setBrushERK6QBrush
_ZN8QPainter9drawLinesEPK5QLinei
_ZN8QPainter9translateERK7QPointF
_ZN8QPainterC1EP12QPaintDevice
_ZN8QPainterD1Ev
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget5getDCEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK7QWidget9releaseDCEP5HDC__
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget5getDCEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
_ZThn8_NK7QWidget9releaseDCEP5HDC__

libgcc_s_dw2-1

_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__emutls_get_address
__register_frame_info

kernel32

CloseHandle
CreateSemaphoreA
ExitProcess
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject

mingwm10

__mingwthr_key_dtor

msvcrt

_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fputc
fputs
free
fwrite
malloc
memcpy
realloc
signal
sprintf
strcmp
strcpy

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 200B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE

/19
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_MEM_DISCARDABLE

/35
Size: 652KB - Virtual size: 651KB

IMAGE_SCN_MEM_DISCARDABLE

/47
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_MEM_DISCARDABLE

/61
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_MEM_DISCARDABLE

/73
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_MEM_DISCARDABLE

/86
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_MEM_DISCARDABLE

/97
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_MEM_DISCARDABLE

/108
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

948118c3b9564f26115165efb8d63fc7

Headers

File Characteristics

Imports

qtcored4

qtguid4

libgcc_s_dw2-1

kernel32

mingwm10

msvcrt

Sections

.text Size: 34KB - Virtual size: 34KB

.data Size: 26KB - Virtual size: 26KB

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 200B

.idata Size: 7KB - Virtual size: 6KB

/4 Size: 2KB - Virtual size: 1KB

/19 Size: 6KB - Virtual size: 6KB

/35 Size: 652KB - Virtual size: 651KB

/47 Size: 23KB - Virtual size: 23KB

/61 Size: 26KB - Virtual size: 26KB

/73 Size: 7KB - Virtual size: 6KB

/86 Size: 18KB - Virtual size: 17KB

/97 Size: 31KB - Virtual size: 30KB

/108 Size: 7KB - Virtual size: 7KB

.text
Size: 34KB - Virtual size: 34KB

.data
Size: 26KB - Virtual size: 26KB

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 200B

.idata
Size: 7KB - Virtual size: 6KB

/4
Size: 2KB - Virtual size: 1KB

/19
Size: 6KB - Virtual size: 6KB

/35
Size: 652KB - Virtual size: 651KB

/47
Size: 23KB - Virtual size: 23KB

/61
Size: 26KB - Virtual size: 26KB

/73
Size: 7KB - Virtual size: 6KB

/86
Size: 18KB - Virtual size: 17KB

/97
Size: 31KB - Virtual size: 30KB

/108
Size: 7KB - Virtual size: 7KB