094dc9102ecebaa2344df518d15843c7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

094dc9102ecebaa2344df518d15843c7_JaffaCakes118
Size

141KB
MD5

094dc9102ecebaa2344df518d15843c7
SHA1

8914ba37bc9deb223aa8baba8f25de4276b229fc
SHA256

b56d5fe5c6e4e0f60a61085cc24876b5aec62ca72d6d08ae91100f39fbcdd31b
SHA512

e724b4414edb94173717a71c99b52a57746a231e77e5ffbdfceb301ebc67bf7ae501505431de8058621f698f322a6d147fa62baea1623e515830706207c4d93b
SSDEEP

3072:E7dJvSzS5hoko0G3WSg2N5htDW9dGMMLc1x5:iRhokxyga5hFIdGMME3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
094dc9102ecebaa2344df518d15843c7_JaffaCakes118

Files

094dc9102ecebaa2344df518d15843c7_JaffaCakes118
.dll windows:5 windows x86 arch:x86

4533658b880074dd0dafc5ef3a649b7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\PS12\PS_12_Win_Daily_Retail\20100407.r.1103\photoshop\main\photoshop\Targets\Win32\Objs\QuickTimeGlueRelease\QuickTimeGlue.pdb

Imports

kernel32

GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
GetCurrentProcessId
CreateMutexA
WaitForSingleObject
GetLastError
ReleaseMutex
GetProcAddress
GetModuleFileNameA
FreeLibrary
GlobalAlloc
GlobalFree
CloseHandle

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

msvcr90

__clean_type_info_names_internal
_crt_debugger_hook
__dllonexit
_lock
_onexit
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
strncpy
_access
memset
memcpy
_unlock

user32

wsprintfA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Exports

Exports

QTAddEmptyTrackToMovie
QTAddImageDescriptionExtension
QTAddMediaSample
QTBeginMediaEdits
QTCDSequenceEnd
QTCFRelease
QTCFStringCreateWithCharacters
QTCloseComponent
QTCloseMovieFile
QTCompressSequenceBegin
QTCompressSequenceFrame
QTCopyPixMapPixels
QTCopyTrackSettings
QTCountImageDescriptionExtensionType
QTCreateMovieFile
QTCreatePortAssociation
QTDestroyPortAssociation
QTDisposeCTable
QTDisposeGWorld
QTDisposeHandle
QTDisposeMovie
QTDisposeMovieController
QTEndMediaEdits
QTEnterMovies
QTExitMovies
QTFindNextComponent
QTGestalt
QTGetCodecInfo
QTGetComponentInfo
QTGetGWorldDevice
QTGetGWorldPixMap
QTGetHandleSize
QTGetImageDescClutID
QTGetImageDescSampleDepth
QTGetImageDescriptionCTable
QTGetImageDescriptionExtension
QTGetMaxCompressionSize
QTGetMediaDuration
QTGetMediaHandler
QTGetMediaHandlerDescription
QTGetMediaNextInterestingTime
QTGetMediaSampleCount
QTGetMediaSampleDescription
QTGetMediaSampleDescriptionCount
QTGetMediaTimeScale
QTGetMovieBox
QTGetMovieDuration
QTGetMovieGWorld
QTGetMovieIndTrackType
QTGetMovieNextInterestingTime
QTGetMoviePreferredRate
QTGetMovieTimeBase
QTGetMovieTimeScale
QTGetMovieTrackCount
QTGetPAR_HSpacing
QTGetPAR_VSpacing
QTGetPixBaseAddr
QTGetPixMapBounds
QTGetPixelsState
QTGetPort
QTGetStringFromHandle
QTGetTrackEnabled
QTGetTrackMedia
QTGoToBeginningOfMovie
QTHLock
QTHUnlock
QTICMImageDescriptionGetProperty
QTInitializeBridge
QTInitializeQTML
QTInsertMediaIntoTrack
QTInsertTrackSegment
QTIsCTableGrayscale
QTLockPixels
QTMCDoAction
QTMCDoActionGoToTime
QTMCDoActionPlay
QTMCDoActionSetVolume
QTMCEnableEditing
QTMCGetCurrentTime
QTMCIdle
QTMCMovieChanged
QTMacSetPort
QTMakeImageDescriptionForPixMap
QTMediaGetPublicInfo
QTMediaGetPublicInfoEncodedFrameRate
QTMediaHasCharacteristic
QTMovieExportAddDataSource
QTMovieExportDoUserDialog
QTMovieExportFromProceduresToDataRef
QTMovieExportGetFileNameExtension
QTMovieExportGetSettingsAsAtomContainer
QTMovieExportSetProgressProc
QTMovieExportSetSettingsFromAtomContainer
QTMoviesTask
QTNewHandle
QTNewMovieController
QTNewMovieFromDataRef
QTNewMovieFromFile
QTNewMovieTrack
QTNewTrackMedia
QTOpenComponent
QTOpenDefaultComponent
QTOpenMovieFile
QTPrerollMovie
QTQTDisposeAtomContainer
QTQTFindChildByID
QTQTGetAtomDataPtr
QTQTGetPixMapHandleGammaLevel
QTQTGetPixMapHandleRowBytes
QTQTNewDataReferenceFromFullPathCFString
QTQTNewGWorld
QTQTSetAtomData
QTQTSetPixMapHandleGammaLevel
QTQTSetPixMapHandleRequestedGammaLevel
QTSetMediaSampleDescription
QTSetMovieBox
QTSetMovieGWorld
QTSetMoviePlayHints
QTSetMovieSelection
QTSetMovieTimeScale
QTSetMovieTimeValue
QTSetPAR_Spacing
QTSetTrackEnabled
QTTerminateQTML
QTUnlockPixels
QTUpdateMovieResource

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4533658b880074dd0dafc5ef3a649b7f

Headers

File Characteristics

PDB Paths

Imports

kernel32

version

msvcr90

user32

advapi32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 920B

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 11KB - Virtual size: 10KB

.text Size: 108KB - Virtual size: 112KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 920B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 11KB - Virtual size: 10KB

.text
Size: 108KB - Virtual size: 112KB