Overview

overview

3

Static

static

3

QPPressKey...ey.exe

windows7-x64

1

QPPressKey...ey.exe

windows10-2004-x64

1

QPPressKey...��.htm

windows7-x64

1

QPPressKey...��.htm

windows10-2004-x64

1

QPPressKey...��.url

windows7-x64

1

QPPressKey...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0eea7a6cffc88c33b5598de1694c6253_JaffaCakes118

  • Size

    615KB

  • MD5

    0eea7a6cffc88c33b5598de1694c6253

  • SHA1

    30bb6c9c4764df50c0e29e7c63e2bae8b0b504b3

  • SHA256

    d651bbd33ab5457f8c729198e31c32b8e993f732352305bcc8fa48f646624576

  • SHA512

    75ab9e520ae41e638abd84e28687ad69424903735c8171185a4cbb6ce56169f6bc055fb35d24bf9217dab23906cc5584346623f48f775eab29c515a3bdcd8c72

  • SSDEEP

    12288:DzdojWNWkGOo1kIdyazSDd/XN1Q2q3FErodNCDMU8l8UnvtFXmpeC/F/:Dz6KNd+hGm2q1YilBVFXmp/F/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0eea7a6cffc88c33b5598de1694c6253_JaffaCakes118
    .rar
  • QPPressKey/QPPressKey/QPPressKey.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QPPressKey/QPPressKey/脚本/QQ三国.ini
  • QPPressKey/QPPressKey/脚本/卓越之剑GE（全体模式）.ini
  • QPPressKey/QPPressKey/脚本/卓越之剑GE（单体模式）.ini
  • QPPressKey/下载说明.htm
    .html
  • QPPressKey/飘荡精品软件.url
    .url