634374a094146c4b14525c0783dbb1e8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

634374a094146c4b14525c0783dbb1e8_JaffaCakes118
Size

337KB
MD5

634374a094146c4b14525c0783dbb1e8
SHA1

235a84e3ce8d83d119356d2f347043cd622faf61
SHA256

7ca060eeb12e4935779ff883ac08b7dc40aa2158e8583cea70a02a45ac1b9f5f
SHA512

e22e8a6d430e20ead9436c6e83c40155ed0d95280e2bfb51cda3b12fa03be08b6334f054e6bd58ead66cb780e71503cbbd3d759a0ab5edc236bd1c1a836cf675
SSDEEP

6144:J56XuanGJHQtUBMTfltnEmj+u+4+dTQ+NOhDhVhfcrcd9v8ZEcEw8/Lj6BT7J0Oj:J5KGJHmPH5BTLx2urq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
634374a094146c4b14525c0783dbb1e8_JaffaCakes118

Files

634374a094146c4b14525c0783dbb1e8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

19746bb51df8e05e41edc797a06a5102

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libkggznet

_ZN7KGGZRaw10setNetworkEi
_ZN7KGGZRawC1Ev
_ZN7KGGZRawlsE7QString
_ZN7KGGZRawlsEa
_ZN7KGGZRawlsEi
_ZN7KGGZRawrsER7QString
_ZN7KGGZRawrsERi

qtcore4

_Z17qt_message_output9QtMsgTypePKc
_Z5qFreePv
_Z7qgetenvPKc
_ZN10QByteArray7reallocEi
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QTextStreamD1Ev
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEc
_ZN11QTextStreamlsEi
_ZN15QSocketNotifierC1EiNS_4TypeEP7QObject
_ZN5QChar9fromAsciiEc
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10disconnectEPKS_PKcS1_S3_
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11deleteLaterEv
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QObject11qt_metacastEPKc
_ZN7QObject13connectNotifyEPKc
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN7QString11shared_nullE
_ZN7QString13fromLocal8BitEPKci
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString4growEi
_ZN7QString6appendERKS_
_ZN7QString6numberEii
_ZN7QString7reallocEi
_ZN7QString9fromAsciiEPKci
_ZN7QStringaSERKS_
_ZN8QMapData10createDataEi
_ZN8QMapData11node_createEPPNS_4NodeEii
_ZN8QMapData11shared_nullE
_ZN8QMapData16continueFreeDataEi
_ZN9QListData11detach_growEPii
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData6detachEi
_ZNK7QString11toLocal8BitEv
_ZNK7QString5toIntEPbi
_ZNK7QStringeqERKS_
_ZNK7QStringltERKS_

kernel32

CloseHandle
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
ReleaseSemaphore
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_write
__dllonexit
_errno
_iob
_winmajor
abort
calloc
fflush
fputc
fputs
free
fwrite
malloc
memcpy
realloc
sprintf
strcmp
strcpy
vfprintf

libgcc_s_dw2-1

_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__emutls_get_address
__register_frame_info

libkdecore

_Z12kDebugStream9QtMsgTypeiPKciS1_
_ZN6KDebug13hasNullOutputE9QtMsgTypebib

Exports

Exports

_ZN4QMapI7QStringS0_E13detach_helperEv
_ZN4QMapI7QStringS0_E8freeDataEP8QMapData
_ZN4QMapI7QStringS0_EixERKS0_
_ZN4QMapIN7KGGZMod13ModulePrivate9GGZEventsE7QStringE13detach_helperEv
_ZN4QMapIN7KGGZMod13ModulePrivate9GGZEventsE7QStringE8freeDataEP8QMapData
_ZN4QMapIN7KGGZMod7Request4TypeE7QStringE13detach_helperEv
_ZN4QMapIN7KGGZMod7Request4TypeE7QStringE8freeDataEP8QMapData
_ZN5QListIPN7KGGZMod6PlayerEE13detach_helperEi
_ZN5QListIPN7KGGZMod6PlayerEE6appendERKS2_
_ZN5QListIPN7KGGZMod6PlayerEED1Ev
_ZN6QDebugD1Ev
_ZN6QDebuglsEPKc
_ZN6QDebuglsERK7QString
_ZN6QDebuglsEi
_ZN7KGGZMod10BotRequestC1Ei
_ZN7KGGZMod10BotRequestC2Ei
_ZN7KGGZMod10SitRequestC1Ei
_ZN7KGGZMod10SitRequestC2Ei
_ZN7KGGZMod10Statistics4initEPNS_17StatisticsPrivateE
_ZN7KGGZMod10StatisticsC1Ev
_ZN7KGGZMod10StatisticsC2Ev
_ZN7KGGZMod10StatisticsD1Ev
_ZN7KGGZMod10StatisticsD2Ev
_ZN7KGGZMod10StatsEventC1ERKNS_5EventE
_ZN7KGGZMod10StatsEventC2ERKNS_5EventE
_ZN7KGGZMod11BootRequestC1ERK7QString
_ZN7KGGZMod11BootRequestC2ERK7QString
_ZN7KGGZMod11ChatRequestC1ERK7QString
_ZN7KGGZMod11ChatRequestC2ERK7QString
_ZN7KGGZMod11InfoRequestC1Ei
_ZN7KGGZMod11InfoRequestC1Ev
_ZN7KGGZMod11InfoRequestC2Ei
_ZN7KGGZMod11InfoRequestC2Ev
_ZN7KGGZMod11LaunchEventC1ERKNS_5EventE
_ZN7KGGZMod11LaunchEventC2ERKNS_5EventE
_ZN7KGGZMod11OpenRequestC1Ei
_ZN7KGGZMod11OpenRequestC2Ei
_ZN7KGGZMod11ServerEventC1ERKNS_5EventE
_ZN7KGGZMod11ServerEventC2ERKNS_5EventE
_ZN7KGGZMod12StandRequestC1Ev
_ZN7KGGZMod12StandRequestC2Ev
_ZN7KGGZMod12StateRequestC1Ei
_ZN7KGGZMod12StateRequestC2Ei
_ZN7KGGZMod13ModulePrivate10disconnectEv
_ZN7KGGZMod13ModulePrivate10findPlayerENS_6Player4TypeERK7QString
_ZN7KGGZMod13ModulePrivate11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7KGGZMod13ModulePrivate11qt_metacastEPKc
_ZN7KGGZMod13ModulePrivate11sendRequestENS_7RequestE
_ZN7KGGZMod13ModulePrivate11signalErrorEv
_ZN7KGGZMod13ModulePrivate11signalEventERKNS_5EventE
_ZN7KGGZMod13ModulePrivate12insertPlayerENS_6Player4TypeERK7QStringi
_ZN7KGGZMod13ModulePrivate12opcodeStringENS0_9GGZEventsE
_ZN7KGGZMod13ModulePrivate12slotGGZErrorEv
_ZN7KGGZMod13ModulePrivate12slotGGZEventEv
_ZN7KGGZMod13ModulePrivate13requestStringENS_7Request4TypeE
_ZN7KGGZMod13ModulePrivate13signalNetworkEi
_ZN7KGGZMod13ModulePrivate16staticMetaObjectE
_ZN7KGGZMod13ModulePrivate7connectEv
_ZN7KGGZMod13ModulePrivateD0Ev
_ZN7KGGZMod13ModulePrivateD1Ev
_ZN7KGGZMod13RankingsEventC1ERKNS_5EventE
_ZN7KGGZMod13RankingsEventC2ERKNS_5EventE
_ZN7KGGZMod15RankingsRequestC1Ev
_ZN7KGGZMod15RankingsRequestC2Ev
_ZN7KGGZMod18readfiledescriptorEiPi
_ZN7KGGZMod5EventC1ENS0_4TypeE
_ZN7KGGZMod5EventC2ENS0_4TypeE
_ZN7KGGZMod5EventD1Ev
_ZN7KGGZMod5EventD2Ev
_ZN7KGGZMod6Module11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7KGGZMod6Module11qt_metacastEPKc
_ZN7KGGZMod6Module11sendRequestENS_7RequestE
_ZN7KGGZMod6Module11signalErrorEv
_ZN7KGGZMod6Module11signalEventERKNS_5EventE
_ZN7KGGZMod6Module13signalNetworkEi
_ZN7KGGZMod6Module16staticMetaObjectE
_ZN7KGGZMod6Module5isGGZEv
_ZN7KGGZMod6Module8instanceEv
_ZN7KGGZMod6ModuleC1ERK7QString
_ZN7KGGZMod6ModuleC2ERK7QString
_ZN7KGGZMod6ModuleD0Ev
_ZN7KGGZMod6ModuleD1Ev
_ZN7KGGZMod6ModuleD2Ev
_ZN7KGGZMod6Player4initEPNS_13PlayerPrivateE
_ZN7KGGZMod6PlayerC1Ev
_ZN7KGGZMod6PlayerC2Ev
_ZN7KGGZMod6PlayerD1Ev
_ZN7KGGZMod6PlayerD2Ev
_ZN7KGGZMod7RequestC1ENS0_4TypeE
_ZN7KGGZMod7RequestC2ENS0_4TypeE
_ZN7KGGZMod7RequestD2Ev
_ZN7KGGZMod9ChatEventC1ERKNS_5EventE
_ZN7KGGZMod9ChatEventC2ERKNS_5EventE
_ZN7KGGZMod9InfoEventC1ERKNS_5EventE
_ZN7KGGZMod9InfoEventC2ERKNS_5EventE
_ZN7KGGZMod9SeatEventC1ERKNS_5EventE
_ZN7KGGZMod9SeatEventC2ERKNS_5EventE
_ZN7KGGZMod9SelfEventC1ERKNS_5EventE
_ZN7KGGZMod9SelfEventC2ERKNS_5EventE
_ZN7QStringD1Ev
_ZNK7KGGZMod10Statistics10hasRankingEv
_ZNK7KGGZMod10Statistics12hasHighscoreEv
_ZNK7KGGZMod10Statistics4tiesEv
_ZNK7KGGZMod10Statistics4winsEv
_ZNK7KGGZMod10Statistics6lossesEv
_ZNK7KGGZMod10Statistics6ratingEv
_ZNK7KGGZMod10Statistics7rankingEv
_ZNK7KGGZMod10Statistics8forfeitsEv
_ZNK7KGGZMod10Statistics9hasRatingEv
_ZNK7KGGZMod10Statistics9hasRecordEv
_ZNK7KGGZMod10Statistics9highscoreEv
_ZNK7KGGZMod10StatsEvent6playerEv
_ZNK7KGGZMod11ServerEvent2fdEv
_ZNK7KGGZMod13ModulePrivate10metaObjectEv
_ZNK7KGGZMod13ModulePrivate4selfEv
_ZNK7KGGZMod13RankingsEvent4nameEi
_ZNK7KGGZMod13RankingsEvent5countEv
_ZNK7KGGZMod13RankingsEvent5scoreEi
_ZNK7KGGZMod5Event4typeEv
_ZNK7KGGZMod5Event6playerEv
_ZNK7KGGZMod6Module10metaObjectEv
_ZNK7KGGZMod6Module10spectatorsEv
_ZNK7KGGZMod6Module4selfEv
_ZNK7KGGZMod6Module5stateEv
_ZNK7KGGZMod6Module7playersEv
_ZNK7KGGZMod6Player4nameEv
_ZNK7KGGZMod6Player4seatEv
_ZNK7KGGZMod6Player4typeEv
_ZNK7KGGZMod6Player5photoEv
_ZNK7KGGZMod6Player5statsEv
_ZNK7KGGZMod6Player8hostnameEv
_ZNK7KGGZMod6Player8realnameEv
_ZNK7KGGZMod7Request4typeEv
_ZNK7KGGZMod9ChatEvent6playerEv
_ZNK7KGGZMod9ChatEvent7messageEv
_ZNK7KGGZMod9InfoEvent6playerEv
_ZNK7KGGZMod9SeatEvent6playerEv
_ZNK7KGGZMod9SelfEvent4selfEv
_ZTI7QObject
_ZTIN7KGGZMod13ModulePrivateE
_ZTIN7KGGZMod6ModuleE
_ZTISt9bad_alloc
_ZTISt9exception
_ZTS7QObject
_ZTSN7KGGZMod13ModulePrivateE
_ZTSN7KGGZMod6ModuleE
_ZTSSt9bad_alloc
_ZTSSt9exception
_ZTVN7KGGZMod13ModulePrivateE
_ZTVN7KGGZMod6ModuleE

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 300B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/71
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/83
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/96
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/107
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/118
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19746bb51df8e05e41edc797a06a5102

Headers

File Characteristics

Imports

libkggznet

qtcore4

kernel32

msvcrt

libgcc_s_dw2-1

libkdecore

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 71KB

.data Size: 19KB - Virtual size: 18KB

.rdata Size: 9KB - Virtual size: 8KB

/4 Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 300B

.edata Size: 7KB - Virtual size: 6KB

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 4KB - Virtual size: 4KB

/14 Size: 1KB - Virtual size: 1KB

/29 Size: 4KB - Virtual size: 3KB

/45 Size: 74KB - Virtual size: 73KB

/57 Size: 12KB - Virtual size: 11KB

/71 Size: 13KB - Virtual size: 12KB

/83 Size: 4KB - Virtual size: 4KB

/96 Size: 2KB - Virtual size: 1KB

/107 Size: 25KB - Virtual size: 25KB

/118 Size: 6KB - Virtual size: 6KB

.text
Size: 72KB - Virtual size: 71KB

.data
Size: 19KB - Virtual size: 18KB

.rdata
Size: 9KB - Virtual size: 8KB

/4
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 300B

.edata
Size: 7KB - Virtual size: 6KB

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 4KB - Virtual size: 4KB

/14
Size: 1KB - Virtual size: 1KB

/29
Size: 4KB - Virtual size: 3KB

/45
Size: 74KB - Virtual size: 73KB

/57
Size: 12KB - Virtual size: 11KB

/71
Size: 13KB - Virtual size: 12KB

/83
Size: 4KB - Virtual size: 4KB

/96
Size: 2KB - Virtual size: 1KB

/107
Size: 25KB - Virtual size: 25KB

/118
Size: 6KB - Virtual size: 6KB