6a57a119d78bf88dc2f8449bb66bd851_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6a57a119d78bf88dc2f8449bb66bd851_JaffaCakes118
Size

53KB
MD5

6a57a119d78bf88dc2f8449bb66bd851
SHA1

7425f660aca5a29cd426199d8a5c5e477cf2bf62
SHA256

6c88fa568b9e52051f7e7d78d21039ebdb7075980c54df384ea5c554fe21ab48
SHA512

865dd6986706da7f7a55457b0a0b089ec6d6ca94a9a4a395751b00bfaec7ee2e7570fc24b92e61ead50b4548901175f646baa4b755b1c09d92fb0d840cf3fd95
SSDEEP

768:0kNOFLUnaT9IeqkrygTdNdJkdNNswEOadE5:rOFwaRdGgTdNdJJOj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a57a119d78bf88dc2f8449bb66bd851_JaffaCakes118

Files

6a57a119d78bf88dc2f8449bb66bd851_JaffaCakes118
.exe windows:5 windows x86 arch:x86

43f48c2ca41b6d7c6e7b307c1bfc7585

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\GQIForGMPUpdate3.3.2\GQI\tools\CADIUpdater\bin\CADIUpdater.pdb

Imports

qt5core

?dispose@QListData@@SAXPAUData@1@@Z
?at@QListData@@QBEPAPAXH@Z
??YQString@@QAEAAV0@ABV0@@Z
??0QString@@QAE@$$QAV0@@Z
??0QCoreApplication@@QAE@AAHPAPADH@Z
??0QTextStream@@QAE@PAU_iobuf@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??1QTextStream@@UAE@XZ
??1QCoreApplication@@UAE@XZ
?arguments@QCoreApplication@@SA?AVQStringList@@XZ
??0QString@@QAE@ABV0@@Z
??0QChar@@QAE@H@Z
?at@QString@@QBE?BVQChar@@H@Z
??0QString@@QAE@PBD@Z
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
??4QString@@QAEAAV0@ABV0@@Z
??1QString@@QAE@XZ
??0QFile@@QAE@ABVQString@@@Z
?exists@QFile@@SA_NABVQString@@@Z
??1QFile@@UAE@XZ
?toStdWString@QString@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ

gtcadimporter

?doInnerLoad@GMPDCADIImporter@@MAEXPAUTCADEdoContainerAdapter@@PAVGCADModel@gcad@@@Z
?createContainer@GMPDCADIImporter@@MAEPAUTCADEdoContainerAdapter@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?createTransferOperator@GMPDCADIImporter@@MAEPAVGMPCADITransferOperator@@XZ
?doUnInit@IGMPDCADIImport@@MAEXXZ
?doInit@GMPDCADIImporter@@MAEXXZ
?LoadDCADIFile@GMPDCADIImporter@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVGCADModel@gcad@@@Z
?setDllPath@IGMPDCADIImport@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?unInit@IGMPDCADIImport@@UAEXXZ
?init@IGMPDCADIImport@@UAEXXZ
??0GMPDCADIImporter@@QAE@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
createCADIOperator
??1GMPDCADIImporter@@UAE@XZ

gcadmodel

?createObject@GCADModel@gcad@@SAPAV12@XZ

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z

msvcr100

??3@YAXPAX@Z
??2@YAPAXI@Z
__iob_func
__CxxFrameHandler3
strlen
memcpy
memmove
wcslen
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??_V@YAXPAX@Z
??1exception@std@@UAE@XZ
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
?what@exception@std@@UBEPBDXZ

kernel32

GetStartupInfoW
HeapSetInformation
TerminateProcess
Sleep
InterlockedExchange
DecodePointer
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
WideCharToMultiByte
LocalFree
GetCommandLineW
InterlockedCompareExchange
EncodePointer

shell32

CommandLineToArgvW

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43f48c2ca41b6d7c6e7b307c1bfc7585

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

qt5core

gtcadimporter

gcadmodel

msvcp100

msvcr100

kernel32

shell32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 1024B - Virtual size: 1KB

.idata Size: 5KB - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 1024B - Virtual size: 1KB

.idata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1KB - Virtual size: 1KB