Overview

overview

7

Static

static

7

QQ号码�...se.exe

windows7-x64

5

QQ号码�...se.exe

windows10-2004-x64

1

SkinH_EL.dll

windows7-x64

7

SkinH_EL.dll

windows10-2004-x64

7

下载说明.htm

windows7-x64

1

下载说明.htm

windows10-2004-x64

1

使用帮�...�).url

windows7-x64

1

使用帮�...�).url

windows10-2004-x64

1

自动更�...��.exe

windows7-x64

5

自动更�...��.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70bdd48cfc4c394f51cd51289f7eae15_JaffaCakes118

  • Size

    5.0MB

  • MD5

    70bdd48cfc4c394f51cd51289f7eae15

  • SHA1

    af11f31db640a5b3ec83412042418e6c3916de3a

  • SHA256

    7c0d306612c847441041510b50458e7236260de6dbadae1d8669f9c6fdd3a0cd

  • SHA512

    2b12a74b0f2d66ac64e05a08370df766b65c61ded74e57a8e961ce1a32ebc0b4f2fe9ddea8dbb699724f28f17825e24b92b9072a2f63a64874db6fea35738180

  • SSDEEP

    98304:cosIGgFJvF4rzJaQ8MoHRO9cbbLzzT0qhhAwAavtRcJj3tJq6fVfjq2KwgPPUg:rpGgTdWtoicbbXsqhZztRI9vq7lUg

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 70bdd48cfc4c394f51cd51289f7eae15_JaffaCakes118
    .rar
  • QQ号码在线提取器_se.exe
    .exe windows:4 windows x86 arch:x86

    3565a6f4506d3f477d8c62c86175d74c


    Headers

    Imports

    Sections

  • SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • fangkejilu.mdb
  • qqzonecity.mdb
  • skinh.she
  • version.ini
  • 下载说明.htm
    .html
  • 使用帮助(河东下载站).url
    .url
  • 使用说明.txt
  • 自动更新程序.exe
    .exe windows:4 windows x86 arch:x86

    3565a6f4506d3f477d8c62c86175d74c


    Headers

    Imports

    Sections

  • 访客采集目标模版.txt
  • 说明.txt