1986a40193676c9d72eaefdf5409fb0a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1986a40193676c9d72eaefdf5409fb0a_JaffaCakes118
Size

647KB
MD5

1986a40193676c9d72eaefdf5409fb0a
SHA1

8b5c66af6e792fc3f49cb57b3af599081ebb96f0
SHA256

fd251310e39feda3bd174fdeb90cc5bec4efada3b801dcfb690d24a821da0cde
SHA512

b2eb8c656568d151cda41c4881680ce55fb72437a9af84b493ed27d83914b50c8b3c5fceb062fe310bd895070a1587303ff69031bb9222e50296c97eef765d91
SSDEEP

12288:iZIOlsLGUPiPlKnY7BxE5p0G/3BWhREGdr/E6l/ECub7p+CKh3hnVzpIuI7Rbfzj:iZNlsLGUPiPlKyxE5p0C3BWhREGdykxa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1986a40193676c9d72eaefdf5409fb0a_JaffaCakes118

Files

1986a40193676c9d72eaefdf5409fb0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8beb11f1215d6733ac9cddde66489b77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTickCount
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OpenProcess
ReadProcessMemory
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WideCharToMultiByte
WriteProcessMemory

mingwm10

__mingwthr_key_dtor

msvcrt

_fdopen
_fstat
_lseek
_read
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fflush
fopen
fputc
fputs
free
fwrite
getenv
iswctype
localeconv
malloc
memchr
memmove
realloc
setlocale
setvbuf
signal
sprintf
strcmp
strcoll
strcpy
strerror
strftime
strlen
strxfrm
time
towlower
towupper
wcscoll
wcsftime
wcslen
wcsxfrm

user32

FindWindowA
GetActiveWindow
GetMessageW
GetWindowThreadProcessId
RegisterHotKey
SetWindowTextA
UnregisterHotKey

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

libgcc_s_dw2-1

_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__emutls_get_address
__register_frame_info
__udivdi3
__umoddi3

qtcore4

_Z5qFreePv
_Z5qrandv
_Z6qsrandj
_Z7qMemSetPvij
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_Z9qBadAllocv
_ZN10QByteArray7reallocEi
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QVectorData10reallocateEPS_iii
_ZN11QVectorData4freeEPS_i
_ZN11QVectorData8allocateEii
_ZN16QCoreApplication9translateEPKcS1_S1_NS_8EncodingE
_ZN4QUrlC1ERK7QString
_ZN4QUrlD1Ev
_ZN6QTimer11setIntervalEi
_ZN6QTimer5startEi
_ZN6QTimerC1EP7QObject
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyEPKc
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QString11shared_nullE
_ZN7QString14fromWCharArrayEPKwi
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString6appendERKS_
_ZN7QString7sprintfEPKcz
_ZN7QString8fromUtf8EPKci
_ZN7QString9fromAsciiEPKci
_ZN7QStringaSERKS_
_ZN7QThread11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QThread11qt_metacastEPKc
_ZN7QThread4exitEi
_ZN7QThread5startENS_8PriorityE
_ZN7QThreadC2EP7QObject
_ZN7QThreadD2Ev
_ZN8QVariantC1ERK7QString
_ZN8QVariantC1Ei
_ZN8QVariantD1Ev
_ZN9QListData11shared_nullE
_ZN9QListData5eraseEPPv
_ZN9QListData6appendEv
_ZN9QListData6insertEi
_ZN9QListData6removeEi
_ZN9QListData7detach3Ev
_ZNK11QMetaObject2trEPKcS1_
_ZNK7QObject10objectNameEv
_ZNK7QString11toLocal8BitEv
_ZNK7QString5splitERKS_NS_13SplitBehaviorEN2Qt15CaseSensitivityE
_ZNK7QString5toIntEPbi
_ZNK7QString7compareERKS_N2Qt15CaseSensitivityE
_ZNK7QString7indexOfERKS_iN2Qt15CaseSensitivityE
_ZNK7QString7toAsciiEv
_ZNK7QThread10metaObjectEv
_ZNK8QVariant8toStringEv

qtgui4

_ZN10QTabWidget10setTabTextEiRK7QString
_ZN10QTabWidget11setTabShapeENS_8TabShapeE
_ZN10QTabWidget12setElideModeEN2Qt13TextElideModeE
_ZN10QTabWidget14setTabPositionENS_11TabPositionE
_ZN10QTabWidget15setCurrentIndexEi
_ZN10QTabWidget20setUsesScrollButtonsEb
_ZN10QTabWidget6addTabEP7QWidgetRK7QString
_ZN10QTabWidget9removeTabEi
_ZN10QTabWidgetC1EP7QWidget
_ZN11QListWidget10insertItemEiRK7QString
_ZN11QListWidget15setItemSelectedEPK15QListWidgetItemb
_ZN11QListWidget5clearEv
_ZN11QListWidget8takeItemEi
_ZN11QListWidgetC1EP7QWidget
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QMessageBox7warningEP7QWidgetRK7QStringS4_6QFlagsINS_14StandardButtonEES6_
_ZN11QPushButton10setDefaultEb
_ZN11QPushButton14setAutoDefaultEb
_ZN11QPushButton7setFlatEb
_ZN11QPushButtonC1EP7QWidget
_ZN12QApplication4execEv
_ZN12QApplication8setStyleEP6QStyle
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN12QTextBrowser20setOpenExternalLinksEb
_ZN12QTextBrowserC1EP7QWidget
_ZN15QAbstractButton10setCheckedEb
_ZN15QAbstractButton12setCheckableEb
_ZN15QAbstractButton7setTextERK7QString
_ZN15QPlastiqueStyleC1Ev
_ZN16QAbstractSpinBox12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE
_ZN16QAbstractSpinBox14setAcceleratedEb
_ZN16QAbstractSpinBox16setButtonSymbolsENS_13ButtonSymbolsE
_ZN16QAbstractSpinBox19setSpecialValueTextERK7QString
_ZN16QDialogButtonBox18setStandardButtonsE6QFlagsINS_14StandardButtonEE
_ZN16QDialogButtonBoxC1EP7QWidget
_ZN5QFont12setPointSizeEi
_ZN5QFont12setUnderlineEb
_ZN5QFont9setWeightEi
_ZN5QFontC1Ev
_ZN5QFontD1Ev
_ZN5QIconC1Ev
_ZN5QIconD1Ev
_ZN5QMenu12addSeparatorEv
_ZN5QMenu4execERK6QPointP7QAction
_ZN5QMenuC1EP7QWidget
_ZN6QFrame13setFrameShapeENS_5ShapeE
_ZN6QFrame14setFrameShadowENS_6ShadowE
_ZN6QFrameC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QLabel12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE
_ZN6QLabel13setTextFormatEN2Qt10TextFormatE
_ZN6QLabel20setOpenExternalLinksEb
_ZN6QLabel7setTextERK7QString
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QSound4playEv
_ZN6QSoundC1ERK7QStringP7QObject
_ZN7QAction10setEnabledEb
_ZN7QAction7setTextERK7QString
_ZN7QActionC1ERK7QStringP7QObject
_ZN7QCursorC1EN2Qt11CursorShapeE
_ZN7QCursorD1Ev
_ZN7QDialog10closeEventEP11QCloseEvent
_ZN7QDialog10setVisibleEb
_ZN7QDialog11eventFilterEP7QObjectP6QEvent
_ZN7QDialog11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QDialog11qt_metacastEPKc
_ZN7QDialog11resizeEventEP12QResizeEvent
_ZN7QDialog13keyPressEventEP9QKeyEvent
_ZN7QDialog16contextMenuEventEP17QContextMenuEvent
_ZN7QDialog16staticMetaObjectE
_ZN7QDialog4doneEi
_ZN7QDialog4execEv
_ZN7QDialog6acceptEv
_ZN7QDialog6rejectEv
_ZN7QDialog9showEventEP10QShowEvent
_ZN7QDialogC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QDialogD2Ev
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10fontChangeERK5QFont
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setEnabledEb
_ZN7QWidget10setToolTipERK7QString
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11setGeometryERK5QRect
_ZN7QWidget11styleChangeER6QStyle
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget12setAttributeEN2Qt15WidgetAttributeEb
_ZN7QWidget12setFixedSizeEii
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13enabledChangeEb
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13paletteChangeERK8QPalette
_ZN7QWidget13setStyleSheetERK7QString
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14languageChangeEv
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setFocusPolicyEN2Qt11FocusPolicyE
_ZN7QWidget14setMinimumSizeEii
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget18setLayoutDirectionEN2Qt15LayoutDirectionE
_ZN7QWidget19setInputMethodHintsE6QFlagsIN2Qt15InputMethodHintEE
_ZN7QWidget20setContextMenuPolicyEN2Qt17ContextMenuPolicyE
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget21setAutoFillBackgroundEb
_ZN7QWidget22windowActivationChangeEb
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget7repaintEv
_ZN7QWidget7setFontERK5QFont
_ZN7QWidget8setFocusEN2Qt11FocusReasonE
_ZN7QWidget8winEventEP6tagMSGPl
_ZN7QWidget9addActionEP7QAction
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9setCursorERK7QCursor
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN8QSpinBox10setMaximumEi
_ZN8QSpinBox10setMinimumEi
_ZN8QSpinBox13setSingleStepEi
_ZN8QSpinBox8setRangeEii
_ZN8QSpinBox8setValueEi
_ZN8QSpinBox9setPrefixERK7QString
_ZN8QSpinBox9setSuffixERK7QString
_ZN8QSpinBoxC1EP7QWidget
_ZN9QCheckBox11setTristateEb
_ZN9QCheckBoxC1EP7QWidget
_ZN9QComboBox10insertItemEiRK5QIconRK7QStringRK8QVariant
_ZN9QComboBox11insertItemsEiRK11QStringList
_ZN9QComboBox15setCurrentIndexEi
_ZN9QComboBox5clearEv
_ZN9QComboBoxC1EP7QWidget
_ZN9QLineEdit12setMaxLengthEi
_ZN9QLineEdit7setTextERK7QString
_ZN9QLineEditC1EP7QWidget
_ZN9QTextEdit7setHtmlERK7QString
_ZNK10QTabWidget12currentIndexEv
_ZNK10QTabWidget7indexOfEP7QWidget
_ZNK11QListWidget10currentRowEv
_ZNK11QListWidget11currentItemEv
_ZNK11QListWidget4itemEi
_ZNK11QListWidget5countEv
_ZNK15QAbstractButton11isCheckableEv
_ZNK16QAbstractSpinBox4textEv
_ZNK17QAbstractItemView12currentIndexEv
_ZNK6QSound10isFinishedEv
_ZNK7QDialog15minimumSizeHintEv
_ZNK7QDialog8sizeHintEv
_ZNK7QWidget11mapToGlobalERK6QPoint
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget5getDCEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK7QWidget9releaseDCEP5HDC__
_ZNK8QSpinBox5valueEv
_ZNK9QCheckBox10checkStateEv
_ZNK9QComboBox12currentIndexEv
_ZNK9QComboBox5countEv
_ZNK9QLineEdit4textEv
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget5getDCEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
_ZThn8_NK7QWidget9releaseDCEP5HDC__

qtwebkit4

_ZN8QWebView4loadERK4QUrl
_ZN8QWebViewC1EP7QWidget
_ZNK8QWebPage9mainFrameEv
_ZNK8QWebView4pageEv
_ZNK9QWebFrame6toHtmlEv

Sections

.text
Size: 490KB - Virtual size: 489KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8beb11f1215d6733ac9cddde66489b77

Headers

File Characteristics

Imports

kernel32

mingwm10

msvcrt

user32

version

libgcc_s_dw2-1

qtcore4

qtgui4

qtwebkit4

Sections

.text Size: 490KB - Virtual size: 489KB

.data Size: 62KB - Virtual size: 61KB

.rdata Size: 51KB - Virtual size: 51KB

.bss Size: - Virtual size: 2KB

.idata Size: 16KB - Virtual size: 15KB

.rsrc Size: 27KB - Virtual size: 26KB

.text
Size: 490KB - Virtual size: 489KB

.data
Size: 62KB - Virtual size: 61KB

.rdata
Size: 51KB - Virtual size: 51KB

.bss
Size: - Virtual size: 2KB

.idata
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 27KB - Virtual size: 26KB