Overview

overview

7

Static

static

7

QQ农场�...32.dll

windows7-x64

1

QQ农场�...32.dll

windows10-2004-x64

1

QQ农场�...TL.dll

windows7-x64

1

QQ农场�...TL.dll

windows10-2004-x64

1

QQ农场�...ET.dll

windows7-x64

1

QQ农场�...ET.dll

windows10-2004-x64

1

QQ农场�...CK.dll

windows7-x64

1

QQ农场�...CK.dll

windows10-2004-x64

1

QQ农场�...59.exe

windows7-x64

1

QQ农场�...59.exe

windows10-2004-x64

1

QQ农场�...32.dll

windows7-x64

1

QQ农场�...32.dll

windows10-2004-x64

1

QQ农场�...��.url

windows7-x64

1

QQ农场�...��.url

windows10-2004-x64

1

QQ农场�...�).bat

windows7-x64

1

QQ农场�...�).bat

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    eb712b5d8b2ab793100ebf707d29d7f3_JaffaCakes118

  • Size

    983KB

  • MD5

    eb712b5d8b2ab793100ebf707d29d7f3

  • SHA1

    8538476070fcc382765888b9194d0816546dc72b

  • SHA256

    19fd1e966aa0f6d5970b81eb54f1b896b56a4974ac80e87d507a8b290b9404d9

  • SHA512

    1b06186544b7236f6108a56fb1c86f271a2122998b81750b0229a6b5ceb4d52984b71c6b1489011a0a10de8a3814204f56b8e4787efafbc9e92705eb1d874240

  • SSDEEP

    24576:4siD8Ss29mVOmcTssR+nug7ObVTq9eF395+IpeWOJvOI:02Omco51uTIkU5OI

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb712b5d8b2ab793100ebf707d29d7f3_JaffaCakes118
    .rar
  • QQ农场小帮手1.59/COMCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    c8cebbf034d8c6304701e5ec3fae70a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ农场小帮手1.59/MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    2b2ee4e06ab7ae589a670cad99121b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ农场小帮手1.59/MSINET.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    96286284ff8e040938ba779778d1542e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ农场小帮手1.59/MSWINSCK.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    cb0275eec9ac31b6d4d44320e576fadb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ农场小帮手1.59/QQ农场小帮手1.59.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQ农场小帮手1.59/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    aa8b0ec5b7d56e08d6614ae243221096


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ农场小帮手1.59/Vista Win7 系统用户不能运行点击.txt
  • QQ农场小帮手1.59/sound/msg.wav
  • QQ农场小帮手1.59/新云软件.url
    .url
  • QQ农场小帮手1.59/无法运行请点我(运行前请解压到文件夹).bat
  • QQ农场小帮手1.59/更新内容.txt