Overview

overview

7

Static

static

7

Setup243.exe

windows7-x64

7

Setup243.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

QQCrazyDouble.dll

windows7-x64

1

QQCrazyDouble.dll

windows10-2004-x64

1

QQCrazyLord.dll

windows7-x64

1

QQCrazyLord.dll

windows10-2004-x64

1

QQDdzrpg.dll

windows7-x64

1

QQDdzrpg.dll

windows10-2004-x64

1

QQDdzrpgD.dll

windows7-x64

1

QQDdzrpgD.dll

windows10-2004-x64

1

QQDig.dll

windows7-x64

1

QQDig.dll

windows10-2004-x64

1

QQDouble.dll

windows7-x64

1

QQDouble.dll

windows10-2004-x64

1

QQDoubleRpg.dll

windows7-x64

1

QQDoubleRpg.dll

windows10-2004-x64

1

QQHappyLord.dll

windows7-x64

1

QQHappyLord.dll

windows10-2004-x64

1

QQHlddz.dll

windows7-x64

1

QQHlddz.dll

windows10-2004-x64

1

QQHs.dll

windows7-x64

1

QQHs.dll

windows10-2004-x64

1

QQLord.dll

windows7-x64

1

QQLord.dll

windows10-2004-x64

1

QQNewsSJRPG.dll

windows7-x64

1

QQNewsSJRPG.dll

windows10-2004-x64

1

QQRush.dll

windows7-x64

1

QQRush.dll

windows10-2004-x64

1

QQThree.dll

windows7-x64

1

QQThree.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e9a721719fa708e338a939cfaa49a5a7_JaffaCakes118

  • Size

    1.7MB

  • MD5

    e9a721719fa708e338a939cfaa49a5a7

  • SHA1

    f4ad5659e90ce1b0845e5c0b3aba09484168b4e4

  • SHA256

    94693494eedc98d0eee4bbbd980a462a831f4749c02b2415e114d826408b8dda

  • SHA512

    b87d1889d2a4ed951537be5eb7750c1cdd8259442f5b6de806cd8988cb4f0407816f1b8fdf339565017be2575571ca482fd81b8538b5681bfffec4c3473d4db1

  • SSDEEP

    49152:80AMZaer5spnG1eqYz1DCBW96GQ4kD8wCrjYDkRcdC:8nBerzUz1+B1P42SPYBdC

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 17 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • e9a721719fa708e338a939cfaa49a5a7_JaffaCakes118
    .rar
  • Setup243.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • LE4-BLACKC.skn
  • LE4-DEFAULT.skn
  • Longhorn Style-BLUE.skn
  • QQCrazyDouble.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQCrazyLord.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDdzrpg.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDdzrpgD.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDig.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDouble.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDoubleRpg.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQHappyLord.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQHlddz.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQHs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQLord.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQNewsSJRPG.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQRush.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQThree.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQVHLDDZ.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQWk.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQward.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Set.ini
  • TNJPQ.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • VistaXP-VISTAXPB2.skn
  • default.skn
  • iTunes.skn
  • luna-BLUE.skn
  • luna-HOMESTEAD.skn
  • luna-METALLIC.skn
  • macos.skn
  • mxskin24.skn
  • mxskin26.skn
  • mxskin68.skn
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • 新云软件.url
    .url