Overview

overview

7

Static

static

7

淘气猫�...te.exe

windows7-x64

1

淘气猫�...te.exe

windows10-2004-x64

1

淘气猫�...by.exe

windows7-x64

5

淘气猫�...by.exe

windows10-2004-x64

1

淘气猫�...PI.dll

windows7-x64

7

淘气猫�...PI.dll

windows10-2004-x64

7

淘气猫�...n2.dll

windows7-x64

1

淘气猫�...n2.dll

windows10-2004-x64

1

淘气猫�...hi.exe

windows7-x64

1

淘气猫�...hi.exe

windows10-2004-x64

1

淘气猫�...32.dll

windows7-x64

1

淘气猫�...32.dll

windows10-2004-x64

1

淘气猫�...an.exe

windows7-x64

1

淘气猫�...an.exe

windows10-2004-x64

1

淘气猫�...32.dll

windows7-x64

1

淘气猫�...32.dll

windows10-2004-x64

1

淘气猫�...ij.exe

windows7-x64

7

淘气猫�...ij.exe

windows10-2004-x64

7

淘气猫�...yj.exe

windows7-x64

7

淘气猫�...yj.exe

windows10-2004-x64

7

淘气猫�...sc.exe

windows7-x64

7

淘气猫�...sc.exe

windows10-2004-x64

7

淘气猫�...��.exe

windows7-x64

1

淘气猫�...��.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    9eecf41b2dbe53a01291c72fed4bbd9f_JaffaCakes118

  • Size

    13.5MB

  • MD5

    9eecf41b2dbe53a01291c72fed4bbd9f

  • SHA1

    f7cbaba8b3a396bf20f52f93934151fe242cf701

  • SHA256

    21850cbc2388ada271b741442a9ba0e31e77a48c59c2882e16f456b121e7376a

  • SHA512

    da7e4fd71ec402b5e839b9fedf1c34726b9fbdd21a4498116e99fb76f5455739d4bd3f31fa292b4dc961218898aea1169cd7fdd3254a32e3bf69bda7ad20ba1c

  • SSDEEP

    393216:B69dbMl+LYaTl3CfRsGyvWN2gzdi44JAbOQz7awrvN:B63MAZt3y+44vQzWu

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 9eecf41b2dbe53a01291c72fed4bbd9f_JaffaCakes118
    .rar
  • 淘气猫工具箱/AutoUpdate.exe
    .exe windows:5 windows x86 arch:x86

    302abe56e5e851d42fb697e29679c987


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 淘气猫工具箱/DB1.MDB
  • 淘气猫工具箱/DownloadBaby.exe
    .exe windows:5 windows x86 arch:x86

    2c0e13ca61d12563d52765a570651c77


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 淘气猫工具箱/ZCB_API.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c0d76203ecb70e85eafc518703ed1701


    Headers

    Imports

    Exports

    Sections

  • 淘气猫工具箱/kaoshi/IrisSkin2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 淘气猫工具箱/kaoshi/WaveColor2.ssk
  • 淘气猫工具箱/kaoshi/kaoshi.exe
    .exe windows:5 windows x86 arch:x86

    720f62ecaae027b5c3ec6686644322e9


    Headers

    Imports

    Sections

  • 淘气猫工具箱/kaoshi/为什么360或QQ管家会误报可疑文件.txt
  • 淘气猫工具箱/kaoshi/安装说明.txt
  • 淘气猫工具箱/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    eae049a0a1734e00acdb960a4409ff45


    Headers

    Imports

    Exports

    Sections

  • 淘气猫工具箱/qijianban.exe
    .exe windows:4 windows x86 arch:x86

    9165ea3e914e03bda3346f13edbd6ccd


    Headers

    Imports

    Sections

  • 淘气猫工具箱/settings/NotDownNick.txt
  • 淘气猫工具箱/settings/NotDownTitle.txt
  • 淘气猫工具箱/settings/desc1_1/AddContent1List.txt
  • 淘气猫工具箱/settings/desc1_1/settings_tb.ini
  • 淘气猫工具箱/settings/settings_tb.ini
  • 淘气猫工具箱/ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    fc968008c899bd44fe0993f28a9c7046


    Headers

    Imports

    Exports

    Sections

  • 淘气猫工具箱/tqmalicaij.exe
    .exe windows:4 windows x86 arch:x86

    87218b8ec2fa77a0b8b8aa7906886f17


    Headers

    Imports

    Sections

  • 淘气猫工具箱/tqmgyj.exe
    .exe windows:4 windows x86 arch:x86

    8ba82369ba11061cca46f551511a91d2


    Headers

    Imports

    Sections

  • 淘气猫工具箱/tqmtbsc.exe
    .exe windows:4 windows x86 arch:x86

    2d08409ea28bc6b9f700371d7882a2f8


    Headers

    Imports

    Sections

  • 淘气猫工具箱/使用说明.TXT
  • 淘气猫工具箱/启动淘气猫工具箱.exe
    .exe windows:4 windows x86 arch:x86

    f94a63ed052bab8a1f939cf62c5b8b1f


    Headers

    Imports

    Sections

  • 淘气猫工具箱/配置.ini