Overview

overview

7

Static

static

3

qbittorrent_4.1.3.exe

windows7-x64

7

qbittorrent_4.1.3.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...lW.dll

windows7-x64

3

$PLUGINSDI...lW.dll

windows10-2004-x64

3

qbittorrent.exe

windows7-x64

1

qbittorrent.exe

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...lW.dll

windows7-x64

3

$PLUGINSDI...lW.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    7e7bae517840724ed1563a3baad6dcc1_JaffaCakes118

  • Size

    18.6MB

  • MD5

    7e7bae517840724ed1563a3baad6dcc1

  • SHA1

    1770be2a22d2ade39bcf8227feec67dd17f967c3

  • SHA256

    55e1a5c9a03e12c498861d3259e68319a37f50af2b610bba05c2d94c53fe84bf

  • SHA512

    1b15e96a76f58fb13798eafda9fef3a6d0a9bee4042c50dedf280dca005f7c70924e855b943b37dc083a4f15a2e3f0ea445fff9144507e246a014ffb7ef3e5cf

  • SSDEEP

    393216:iDe2iHOUHbRkmoSQG9jTpIIpCxUul0ROceJXbbELCpntutt:i/0ZRkmo1G9XpE2YLQctub

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • 7e7bae517840724ed1563a3baad6dcc1_JaffaCakes118
    .zip
  • qbittorrent_4.1.3.exe
    .exe windows:4 windows x86 arch:x86

    4ea4df5d94204fc550be1874e1b77ea7


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    0cd94af3a016a5de4ab9a5a9a02d4173


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsisFirewallW.dll
    .dll windows:4 windows x86 arch:x86

    18ecfc7436b69f8c13ec22664f9f1857


    Headers

    Imports

    Exports

    Sections

  • qbittorrent.exe
    .exe windows:5 windows x86 arch:x86

    2004fd0c13d19b3ff4d2adcd70be70bb


    Headers

    Imports

    Sections

  • qbittorrent.pdb
  • qt.conf
  • translations/qt_ar.qm
  • translations/qt_ca.qm
  • translations/qt_cs.qm
  • translations/qt_da.qm
  • translations/qt_de.qm
  • translations/qt_es.qm
  • translations/qt_fa.qm
  • translations/qt_fi.qm
  • translations/qt_fr.qm
  • translations/qt_gl.qm
  • translations/qt_he.qm
  • translations/qt_hu.qm
  • translations/qt_it.qm
  • translations/qt_ja.qm
  • translations/qt_ko.qm
  • translations/qt_lt.qm
  • translations/qt_pl.qm
  • translations/qt_pt.qm
  • translations/qt_ru.qm
  • translations/qt_sk.qm
  • translations/qt_sl.qm
  • translations/qt_sv.qm
  • translations/qt_uk.qm
  • translations/qt_zh_CN.qm
  • translations/qt_zh_TW.qm
  • translations/qtbase_ca.qm
  • translations/qtbase_cs.qm
  • translations/qtbase_de.qm
  • translations/qtbase_es.qm
  • translations/qtbase_fi.qm
  • translations/qtbase_fr.qm
  • translations/qtbase_gd.qm
  • translations/qtbase_he.qm
  • translations/qtbase_hu.qm
  • translations/qtbase_it.qm
  • translations/qtbase_ja.qm
  • translations/qtbase_ko.qm
  • translations/qtbase_lv.qm
  • translations/qtbase_pl.qm
  • translations/qtbase_ru.qm
  • translations/qtbase_sk.qm
  • translations/qtbase_uk.qm
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    4ea4df5d94204fc550be1874e1b77ea7


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    0cd94af3a016a5de4ab9a5a9a02d4173


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsisFirewallW.dll
    .dll windows:4 windows x86 arch:x86

    18ecfc7436b69f8c13ec22664f9f1857


    Headers

    Imports

    Exports

    Sections