General

  • Target

    4e2f03e28e67a82551b251ecb40bff6d_JaffaCakes118

  • Size

    10.9MB

  • MD5

    4e2f03e28e67a82551b251ecb40bff6d

  • SHA1

    94305f2a6a82a03b8c5d302166c65bbf26c8ce72

  • SHA256

    771f0587b3a19158c3b9af9d1f3afbaca68c143ae45b40e2c89b58c01b3e539e

  • SHA512

    9c1b1cc844c498ad829a720e29cac43e1d314a4b7a2aba0f94493f0bf8b2c290057fae06648c11e8f11ce93c20e8361c572f853a246d7410ab680cd4daea246d

  • SSDEEP

    196608:8jbZB31RuG3zFVpEZSPiNHmg7ee3rZu8oEfE/hGrla/kZw/wfZyeCdYrvoKbD2Ae:8hBWG3z/eSSGBaZExkZgwfZyrYboKvJe

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 31 IoCs

    Checks for missing Authenticode signature.

Files

  • 4e2f03e28e67a82551b251ecb40bff6d_JaffaCakes118
    .zip
  • kQjqrcjdq_gr/config/1930296248/uin.db
  • kQjqrcjdq_gr/config/basic.ini
  • kQjqrcjdq_gr/config/cqset.ini
  • kQjqrcjdq_gr/config/group.ini
  • kQjqrcjdq_gr/config/lang.ini
  • kQjqrcjdq_gr/config/log/error_2014_9_10.log
  • kQjqrcjdq_gr/config/log/error_2014_9_13.log
  • kQjqrcjdq_gr/config/log/error_2015_6_10.log
  • kQjqrcjdq_gr/config/login.ini
  • kQjqrcjdq_gr/config/reply.ini
  • kQjqrcjdq_gr/config/新世界/reply.ini
  • kQjqrcjdq_gr/config/新世界/副本配置.ini
  • kQjqrcjdq_gr/config/新世界/宠物对战.ini
  • kQjqrcjdq_gr/config/新世界/宠物用品.ini
  • kQjqrcjdq_gr/config/新世界/宠物装备.ini
  • kQjqrcjdq_gr/config/新世界/寻宝配置.ini
  • kQjqrcjdq_gr/config/新世界/排行配置.ini
  • kQjqrcjdq_gr/config/新世界/插件制作.ini
  • kQjqrcjdq_gr/config/新世界/日常用品.ini
  • kQjqrcjdq_gr/config/新世界/神奇宝贝1.0.edb
  • kQjqrcjdq_gr/config/新世界/签到配置.ini
  • kQjqrcjdq_gr/config/新世界/菜单配置.ini
  • kQjqrcjdq_gr/config/新世界/越换装备.ini
  • kQjqrcjdq_gr/cqapi.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • kQjqrcjdq_gr/cskin.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • kQjqrcjdq_gr/gzip.dll
    .dll windows:5 windows x86 arch:x86

    63bc622ddbb364868c646ebb5f982ffe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/libiconv.dll
    .dll windows:4 windows x86 arch:x86

    b57145d5109d4ce25127c2abfd17054d


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/.onoff.cqp.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/.onoff.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/cqonoff.ini
  • kQjqrcjdq_gr/plugin/控制台.cqp.dll
    .dll windows:4 windows x86 arch:x86

    6462ee83af9428667a693ede899ceb69


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/控制台.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-三公扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    f05374e2c0b4c8b574e686ab84c385b2


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-三公扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-会员福利扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    c24c1a6ede3a44984442a9707414aad8


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-会员福利扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-偷盗保释扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    f05374e2c0b4c8b574e686ab84c385b2


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-偷盗保释扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-偷袭扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    f05374e2c0b4c8b574e686ab84c385b2


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-偷袭扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-冒险组队扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    79ba508e11e2f0eb75c5832bac4a9787


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-冒险组队扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-动漫扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    87c88cb7126771c9771e298dcc4df633


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-动漫扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-商城扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    79ba508e11e2f0eb75c5832bac4a9787


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-商城扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-奴隶扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    c24c1a6ede3a44984442a9707414aad8


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-奴隶扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-婚姻系统.cqp.dll
    .dll windows:4 windows x86 arch:x86

    f05374e2c0b4c8b574e686ab84c385b2


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-婚姻系统.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-宠物扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    c24c1a6ede3a44984442a9707414aad8


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-宠物扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-帮派扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    357d568f922488baef9eec4a8f823add


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-帮派扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-成语接龙扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    f874b6b8de532c6da1f2fa3beae2b815


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-成语接龙扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-打怪抽奖打工扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    357d568f922488baef9eec4a8f823add


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-打怪抽奖打工扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-排行榜扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    357d568f922488baef9eec4a8f823add


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-排行榜扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-日常信息扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    acff05494a5eef47ab40a5dea3d27467


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-日常信息扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-智能学习扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    e30e956b1563bdfc53e88e088239b98e


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-歌曲扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    f874b6b8de532c6da1f2fa3beae2b815


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-歌曲扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-漂流瓶扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    f05374e2c0b4c8b574e686ab84c385b2


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-漂流瓶扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-猜拳扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    f05374e2c0b4c8b574e686ab84c385b2


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-猜拳扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-猜数.cqp.dll
    .dll windows:4 windows x86 arch:x86

    f05374e2c0b4c8b574e686ab84c385b2


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-猜数.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-真心话大冒险扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    f05374e2c0b4c8b574e686ab84c385b2


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-真心话大冒险扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-笑话扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    f05374e2c0b4c8b574e686ab84c385b2


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-笑话扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-银行扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    f05374e2c0b4c8b574e686ab84c385b2


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-银行扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-随机地鼠扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    c24c1a6ede3a44984442a9707414aad8


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-随机地鼠扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/新世界-魅力献花扩展.cqp.dll
    .dll windows:4 windows x86 arch:x86

    f05374e2c0b4c8b574e686ab84c385b2


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/plugin/新世界-魅力献花扩展.cqp.dll.ini
  • kQjqrcjdq_gr/plugin/谁是卧底新世界扩展包.wodi
  • kQjqrcjdq_gr/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    12baaaec299bc9ff52d20c16e4d0e96a


    Headers

    Imports

    Exports

    Sections

  • kQjqrcjdq_gr/群机器人主程序.exe
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • readme.url
    .url
  • 下载王www.xzking.com.url
    .url