General

  • Target
    8a8322becd5a1eee98a776a6aa573f03_JaffaCakes118
  • Size 13.9MB
  • Sample240601-p5e7cade87
  • SHA256 0d13dd9df82ec9d8b778815ae9634d8ab63a1facd76de25d406e33aa44b0aecf
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 8a8322becd5a1eee98a776a6aa573f03_JaffaCakes118
    .exe 13.9MB
  • $PLUGINSDIR/InstallHelper.dll
    .dll 320KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 15KB
  • $PLUGINSDIR/InstallingBG01.png
    .png 122KB
  • $PLUGINSDIR/InstallingBG02.png
    .png 149KB
  • $PLUGINSDIR/InstallingBG03.png
    .png 142KB
  • $PLUGINSDIR/QQMusicResource.dll
    .dll 711KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/bg1.png
    .png 36KB
  • $PLUGINSDIR/bg2.png
    .png 59KB
  • $PLUGINSDIR/bg3.png
    .png 27KB
  • $PLUGINSDIR/browse.png
    .png 649B
  • $PLUGINSDIR/checkbox.png
    .png 3KB
  • $PLUGINSDIR/close.png
    .png 3KB
  • $PLUGINSDIR/custom.png
    .png 2KB
  • $PLUGINSDIR/empty_bg.png
    .png 249B
  • $PLUGINSDIR/express.png
    .png 19KB
  • $PLUGINSDIR/finish.png
    .png 17KB
  • $PLUGINSDIR/full_bg.png
    .png 819B
  • $PLUGINSDIR/ioSpecial.ini
    424B
  • $PLUGINSDIR/logo.png
    .png 29KB
  • $PLUGINSDIR/modern-header.bmp
    8KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/onekey.png
    .png 17KB
  • $PLUGINSDIR/shadow_active.png
    .png 4KB
  • $PLUGINSDIR/shadow_deactive.png
    .png 4KB
  • $PLUGINSDIR/slogan.png
    .png 4KB
  • $PLUGINSDIR/strongbtn.png
    .png 880B
  • $PLUGINSDIR/weakbtn.png
    .png 868B
  • $PROGRAMFILES/Tencent/QZoneMusic/$_24_/QzoneMusic.dll
    .dll 383KB
  • $PROGRAMFILES/Tencent/QZoneMusic/$_24_/QzoneMusic.exe
    .exe 387KB
  • $PROGRAMFILES/Tencent/QZoneMusic/$_24_/npQzoneMusic.dll
    .dll 151KB
  • $TEMP/QQPCDetector.exe
    .exe 1.0MB
  • AutoPowerOff.exe
    .exe 15KB
  • CMInternet.dll
    .dll 38KB
  • Common.dll
    .dll 1.9MB
  • DataTransform.exe
    .exe 86KB
  • DataTransformEx.exe
    .exe 63KB
  • ExceptCatch.dll
    .dll 103KB
  • GF.dll
    .dll 2.2MB
  • GFHost.dll
    .dll 87KB
  • Microsoft.VC80.ATL.manifest
    .xml 466B
  • Microsoft.VC80.CRT.manifest
    1KB
  • Microsoft.VC80.MFC.manifest
    2KB
  • Microsoft.VC80.MFCLOC.manifest
    .xml 1KB
  • MtpWrapper.dll
    .dll 199KB
  • QMDataBaseMgr.dll
    .dll 318KB
  • QMListView.dll
    .dll 199KB
  • QMP_COMMON.dll
    .dll 18KB
  • QQGameInstall/DownloadHost.dll
    .dll 518KB
  • QQGameInstall/Image/Button.png
    .png 4KB
  • QQGameInstall/Image/Minimize.png
    .png 3KB
  • QQGameInstall/Image/background1.png
    .png 44KB
  • QQGameInstall/Image/background3.png
    .png 27KB
  • QQGameInstall/Image/close.png
    .png 4KB
  • QQGameInstall/Image/icon.ico
    14KB
  • QQGameInstall/Image/loading-left.bmp
    368B
  • QQGameInstall/Image/loading-middle.bmp
    264B
  • QQGameInstall/Image/loading-right.bmp
    472B
  • QQGameInstall/Image/loading.png
    .png 2KB
  • QQGameInstall/Image/loading_bg.png
    .png 1KB
  • QQGameInstall/QQGameDownloader.exe
    .exe 73KB
  • QQGameInstall/TNProxy.dll
    .dll 377KB
  • QQGameInstall/p2papp.dll
    .dll 1.9MB
  • QQMediaPlayer.dll
    .dll 943KB
  • QQMusic.exe
    .exe 2.8MB
  • QQMusic.tpc
    642B
  • QQMusicAddin/Addin.ini
    20B
  • QQMusicAddin/Microsoft.VC80.ATL.manifest
    .xml 466B
  • QQMusicAddin/Microsoft.VC80.CRT.manifest
    1KB
  • QQMusicAddin/Microsoft.VC80.MFC.manifest
    2KB
  • QQMusicAddin/Microsoft.VC80.MFCLOC.manifest
    .xml 1KB
  • QQMusicAddin/atl80.dll
    .dll 95KB
  • QQMusicAddin/msvcp80.dll
    .dll 541KB
  • QQMusicAddin/msvcr80.dll
    .dll 617KB
  • QQMusicAddin/qmp_aac.dll
    .dll 227KB
  • QQMusicAddin/qmp_alac.dll
    .dll 24KB
  • QQMusicAddin/qmp_ape.dll
    .dll 87KB
  • QQMusicAddin/qmp_asf.dll
    .dll 22KB
  • QQMusicAddin/qmp_dts.dll
    .dll 127KB
  • QQMusicAddin/qmp_flac.dll
    .dll 83KB
  • QQMusicAddin/qmp_mp3.dll
    .dll 71KB
  • QQMusicAddin/qmp_ogg.dll
    .dll 171KB
  • QQMusicAddin/wmadmod.dll
    .dll 387KB
  • QQMusicAgent.exe
    .exe 139KB
  • QQMusicApi.dll
    .dll 187KB
  • QQMusicCommon.dll
    .dll 747KB
  • QQMusicCommon_new.dll
    .dll 191KB
  • QQMusicDldEx.dll
    .dll 2.3MB
  • QQMusicExternal.exe
    .exe 151KB
  • QQMusicIE.exe
    .exe 207KB
  • QQMusicPlayer.dll
    .dll 435KB
  • QQMusicResource.dll
    .dll 711KB
  • QQMusicSvr.exe
    .exe 231KB
  • QQMusicUninst.exe
    .exe 28KB
  • QQMusicUp.exe
    .exe 303KB
  • QQMusic_DataBaseMgr.dll
    .dll 683KB
  • QQMusic_DataBaseMgr_old.dll
    .dll 698KB
  • QQMusic_GFFileManager.dll
    .dll 919KB
  • QQMusic_GFPortal.dll
    .dll 219KB
  • QQMusic_GFWrapper.dll
    .dll 511KB
  • QQMusic_Login.dll
    .dll 219KB
  • QQMusic_Lyric.dll
    .dll 559KB
  • QQMusic_Network.dll
    .dll 287KB
  • QQMusic_Protocol.dll
    .dll 1.2MB
  • QQMusic_QMPMgr.dll
    .dll 263KB
  • QQMusic_Win7Feature2.dll
    .dll 91KB
  • QQPlayer.dll
    .dll 111KB
  • Resource.rdb
    3.4MB
  • TNProxy.dll
    .dll 381KB
  • TXSSO/I18N/2052/PGFStringBundle.xml
    .xml 6KB
  • TXSSO/I18N/2052/SSOStringBundle.xml
    .xml 3KB
  • TXSSO/I18N/SSOConfig.xml
    .xml 394B
  • TXSSO/InstTXSSO.exe
    .exe 91KB
  • TXSSO/bin/SSOCommon.dll
    .dll 1.5MB
  • TXSSO/bin/SSOLUIControl.dll
    .dll 481KB
  • TXSSO/bin/SSOPlatform.dll
    .dll 1.3MB
  • TXSSO/bin/npSSOAxCtrlForPTLogin.dll
    .dll 193KB
  • Uninstall.exe
    .exe 450KB
  • $PLUGINSDIR/InstallHelper.dll
    .dll 312KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/modern-header.bmp
    8KB
  • Version.ini
    282B
  • arkGraphic.dll
    .dll 335KB
  • atl80.dll
    .dll 95KB
  • auzip.dll
    .dll 51KB
  • jgIOStub.dll
    .dll 16KB
  • jgImage.dll
    .dll 46KB
  • libexpatw.dll
    .dll 135KB
  • libjpegturbo.dll
    .dll 279KB
  • libpng.dll
    .dll 155KB
  • lua.dll
    .dll 147KB
  • moleplugin/AdbWinApi.dll
    .dll 101KB
  • moleplugin/AdbWinUsbApi.dll
    .dll 67KB
  • moleplugin/AndroidDevice.dll
    .dll 382KB
  • moleplugin/InstallPlugin.dll
    .dll 636KB
  • moleplugin/box
    .elf 2KB
  • moleplugin/device.xml
    80KB
  • moleplugin/extapp.xml
    6KB
  • moleplugin/filter.xml
    7KB
  • moleplugin/installerror.xml
    6KB
  • moleplugin/tadb.exe
    .exe 802KB
  • msdmo.dll
    .dll 21KB
  • msvcp80.dll
    .dll 541KB
  • msvcr80.dll
    .dll 617KB
  • p2papi.dll
    .dll 647KB
  • p2papp.dll
    .dll 323KB
  • p2pcore.dll
    .dll 599KB
  • p2pdata.dll
    .dll 443KB
  • p2phttp.dll
    .dll 251KB
  • tinyxml.dll
    .dll 99KB
  • tssafeedit.dat
    .dll 40KB
  • out.upx
    .dll 55KB
  • vbscript.dll
    .dll 459KB
  • xGraphic32.dll
    .dll 99KB
  • zlib.dll
    .dll 87KB

8a8322becd5a1eee98a776a6aa573f03_JaffaCakes118

  • IMPHASH 32f3282581436269b3a75b6675fe3e08
  • SHA256 0d13dd9df82ec9d8b778815ae9634d8ab63a1facd76de25d406e33aa44b0aecf
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
4f:7a:2a:bf:54:92:1f:46:ef:83:e3:21:cf:e2:b4:a4:5a:f9:8c:8c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CN
Chains

Aug 16, 2013

Minor OS version
0
Major OS version
5
Entry point
14819
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths