General

  • Target

    02891f9121c54b57e2ff1e8d93b5680c_JaffaCakes118

  • Size

    590KB

  • MD5

    02891f9121c54b57e2ff1e8d93b5680c

  • SHA1

    1d45e1cf6ee472087c35d425df150a6ec20ae478

  • SHA256

    3567ebf5562cae53a340aed5e937797f5ad2e7920fa4fdd63f02dd99eadc45b5

  • SHA512

    bac99c7eeb027e6ade5e6d5a07c1a329fbe74130e0844520083fb26772b30939532da39ba39bbe65c64a68a990393397f4c3ed9d1bf58db56e1fd9fb67f08a15

  • SSDEEP

    12288:6kMalUFc2Xu5l8LSwZvIUv8XK0rE7IU70dJAziv729dviC:3j+LSWvV17IldJAii9dviC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 02891f9121c54b57e2ff1e8d93b5680c_JaffaCakes118
    .rar
  • qqnmbl/Animal.xml
    .xml
  • qqnmbl/Plant.xml
    .xml
  • qqnmbl/Sound/提示音1.wav
  • qqnmbl/Sound/提示音2.wav
  • qqnmbl/Sound/提示音3.wav
  • qqnmbl/Sound/提示音4.wav
  • qqnmbl/Update.exe
    .exe windows:4 windows x86 arch:x86

    9cfdc51ed255d6bdc3eb8e43b1dc18a1


    Headers

    Imports

    Sections

  • qqnmbl/qq农牧伴侣.exe
    .exe windows:4 windows x86 arch:x86

    40514c7ff9feb7dcc02c153dfabdfd47


    Headers

    Imports

    Sections

  • qqnmbl/使用前须知.txt
  • qqnmbl/新云软件.url
    .url
  • qqnmbl/更新日志.txt