Static task
static1
Behavioral task
behavioral1
Sample
TenyQQ.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
TenyQQ.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
安装必读.url
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
安装必读.url
Resource
win10v2004-20240611-en
General
-
Target
22ea2adf74ec7b245ee9ca2fdc74d3d4_JaffaCakes118
-
Size
42KB
-
MD5
22ea2adf74ec7b245ee9ca2fdc74d3d4
-
SHA1
bc5661261979a13792282b0c872354afd331d2ac
-
SHA256
163c81cb82c0c92ac84a612533a4991c9c09dc99c52a712953cf18b37065c142
-
SHA512
b0af931aa3f8a978db5b18205f1c5fd9ef74de673859871521d3708ca0cd89a7cd8119b44c03655eda9c8b14917d60bb1453c9532ba6e1e84e908516d45e600b
-
SSDEEP
768:QdizzgpqJQD2g3sVk6481BKhiIWE2fd9Z3aVdkvaVVNDogHdJlYUowkLO0q:QZzDD3sVrEhN6fdLa/UsbXlklK0q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/TenyQQ.exe
Files
-
22ea2adf74ec7b245ee9ca2fdc74d3d4_JaffaCakes118.rar
-
History.txt
-
MD5.txt
-
Readme.txt
-
TenyQQ.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 164KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
-
安装必读.url.url