Overview

overview

7

Static

static

7

qqxc1.21/qqxc.dll

windows7-x64

7

qqxc1.21/qqxc.dll

windows10-2004-x64

7

qqxc1.21/�...��.url

windows7-x64

1

qqxc1.21/�...��.url

windows10-2004-x64

1

qqxc1.21/�...21.exe

windows7-x64

7

qqxc1.21/�...21.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    08a6c990bb045a6c25c81e192cbb519e_JaffaCakes118

  • Size

    580KB

  • MD5

    08a6c990bb045a6c25c81e192cbb519e

  • SHA1

    eafc7abe8338c978a52c508bd41eaa1b3d421b09

  • SHA256

    5f4b1be6416f2548e5a42382f449332f0cb35351286deea585522e7e714124e3

  • SHA512

    38856b519050610c4c69df2a4dc1804b376fb9b726a7b27302d6429e0b783d5abf59e8afe7dda3861567701b5f98ad713641fadd6b3d00afaf1dae8108bf5a79

  • SSDEEP

    12288:d9ShsOX8NTgFPaVPnSZDAL+pKLyEQmoP3Uh38FYu5S2BKxjVg:L3c8NTgFPUopKLNsEh38RtmBg

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 08a6c990bb045a6c25c81e192cbb519e_JaffaCakes118
    .rar
  • qqxc1.21/qqxc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • qqxc1.21/新云软件.url
    .url
  • qqxc1.21/风很凉QQ相册图片批量下载器v1.21.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections