e1db73340988436f7ea98a50d9951355_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e1db73340988436f7ea98a50d9951355_JaffaCakes118
Size

317KB
MD5

e1db73340988436f7ea98a50d9951355
SHA1

880da8988044f6f3e6411b71efd5f6098bf4d7f7
SHA256

e62a0c6fb733b812235c522381a0d1398fbeaa0c21a55a86850e1f3885b21aab
SHA512

ed57995ce570e47fd285c31f0ec3aec7bd15c2001ea9ceab089cf7aa77d4982a9cb948d0a9be49a4c69f8cac4037037ee9aad8c713ecacff1659d350bfcab115
SSDEEP

6144:pcha1KVuJ9lX2zNfQv3vCJYKepUDJYmpmOK9xIdBEMo+0WHtDo:T1OuJ787JYKe7MBEMojWNDo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1db73340988436f7ea98a50d9951355_JaffaCakes118

Files

e1db73340988436f7ea98a50d9951355_JaffaCakes118
.dll windows:5 windows x86 arch:x86

fd7f66146d21667013dc20c19dd655d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Qt\4.7.1_SHARED\plugins\imageformats\qjpeg4.pdb

Imports

qtgui4

??1QImageIOPlugin@@UAE@XZ
?qt_metacall@QImageIOPlugin@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QImageIOPlugin@@UAEPAXPBD@Z
?metaObject@QImageIOPlugin@@UBEPBUQMetaObject@@XZ
??0QImageIOPlugin@@QAE@PAVQObject@@@Z
?setDevice@QImageIOHandler@@QAEXPAVQIODevice@@@Z
?setFormat@QImageIOHandler@@QAEXABVQByteArray@@@Z
?colorTable@QImage@@QBE?AV?$QVector@I@@XZ
?width@QImage@@QBEHXZ
?height@QImage@@QBEHXZ
?colorCount@QImage@@QBEHXZ
?dotsPerMeterX@QImage@@QBEHXZ
?dotsPerMeterY@QImage@@QBEHXZ
?constScanLine@QImage@@QBEPBEH@Z
?pixel@QImage@@QBEIHH@Z
?device@QImageIOHandler@@QBEPAVQIODevice@@XZ
?setFormat@QImageIOHandler@@QBEXABVQByteArray@@@Z
?scanLine@QImage@@QAEPAEH@Z
?setDotsPerMeterX@QImage@@QAEXH@Z
?setDotsPerMeterY@QImage@@QAEXH@Z
?scaled@QImage@@QBE?AV1@ABVQSize@@W4AspectRatioMode@Qt@@W4TransformationMode@4@@Z
?copy@QImage@@QBE?AV1@ABVQRect@@@Z
?currentImageRect@QImageIOHandler@@UBE?AVQRect@@XZ
?currentImageNumber@QImageIOHandler@@UBEHXZ
?nextImageDelay@QImageIOHandler@@UBEHXZ
?imageCount@QImageIOHandler@@UBEHXZ
?loopCount@QImageIOHandler@@UBEHXZ
?jumpToImage@QImageIOHandler@@UAE_NH@Z
?jumpToNextImage@QImageIOHandler@@UAE_NXZ
??0QImageIOHandler@@QAE@XZ
??1QImageIOHandler@@UAE@XZ
?size@QImage@@QBE?AVQSize@@XZ
?format@QImage@@QBE?AW4Format@1@XZ
??0QImage@@QAE@ABVQSize@@W4Format@0@@Z
??4QImage@@QAEAAV0@ABV0@@Z
??1QImage@@UAE@XZ
?setColorCount@QImage@@QAEXH@Z
?setColor@QImage@@QAEXHI@Z
?isNull@QImage@@QBE_NXZ

qtcore4

?cast@QMetaObject@@QBEPAVQObject@@PAV2@@Z
?staticMetaObject@QBuffer@@2UQMetaObject@@B
??4QVariant@@QAEAAV0@ABV0@@Z
??0QVariant@@QAE@ABVQSize@@@Z
??0QVariant@@QAE@ABV0@@Z
??0QVariant@@QAE@ABVQRect@@@Z
??0QVariant@@QAE@H@Z
?qstrcmp@@YAHABVQByteArray@@PBD@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXPBD@Z
?disconnectNotify@QObject@@MAEXPBD@Z
?shared_null@QListData@@2UData@1@A
?removeGuard@QMetaObject@@SAXPAPAVQObject@@@Z
?changeGuard@QMetaObject@@SAXPAPAVQObject@@PAV2@@Z
??0QString@@QAE@ABV0@@Z
?free@QString@@CAXPAUData@1@@Z
?isWritable@QIODevice@@QBE_NXZ
?isReadable@QIODevice@@QBE_NXZ
?isOpen@QIODevice@@QBE_NXZ
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?detach@QListData@@QAEPAUData@1@H@Z
?append@QListData@@QAEPAPAXXZ
??1QString@@QAE@XZ
?fromLatin1_helper@QString@@CAPAUData@1@PBDH@Z
?qFree@@YAXPAX@Z
??1QByteArray@@QAE@XZ
??IQRect@@QBE?AV0@ABV0@@Z
?free@QVectorData@@SAXPAU1@H@Z
??0QByteArray@@QAE@PBD@Z
?toSize@QVariant@@QBE?AVQSize@@XZ
?toRect@QVariant@@QBE?AVQRect@@XZ
?peek@QIODevice@@QAE_JPAD_J@Z
?qDetectCPUFeatures@@YAIXZ
??1QVariant@@QAE@XZ
??0QVariant@@QAE@XZ
?write@QIODevice@@QAE_JPBD_J@Z
?data@QBuffer@@QBEABVQByteArray@@XZ
?read@QIODevice@@QAE_JPAD_J@Z
?qWarning@@YAXPBDZZ
?toInt@QVariant@@QBEHPA_N@Z

msvcr90

__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_CxxThrowException
getenv
sscanf
sprintf
__iob_func
fprintf
malloc
free
memset
??_V@YAXPAX@Z
__CxxLongjmpUnwind
_setjmp3
exit
memcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler3
longjmp

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Exports

Exports

qt_plugin_instance
qt_plugin_query_verification_data

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 125KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fd7f66146d21667013dc20c19dd655d3

Headers

File Characteristics

PDB Paths

Imports

qtgui4

qtcore4

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 167KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text Size: 125KB - Virtual size: 128KB

.text
Size: 168KB - Virtual size: 167KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 125KB - Virtual size: 128KB