Overview

overview

7

Static

static

7

COCQ/COCQ.exe

windows7-x64

7

COCQ/COCQ.exe

windows10-2004-x64

COCQ/EThread.dll

windows7-x64

1

COCQ/EThread.dll

windows10-2004-x64

1

COCQ/SkinH...Ex.dll

windows7-x64

7

COCQ/SkinH...Ex.dll

windows10-2004-x64

7

COCQ/TrayIcon.dll

windows7-x64

1

COCQ/TrayIcon.dll

windows10-2004-x64

1

COCQ/eAPI.dll

windows7-x64

1

COCQ/eAPI.dll

windows10-2004-x64

1

COCQ/iext.dll

windows7-x64

1

COCQ/iext.dll

windows10-2004-x64

1

COCQ/internet.dll

windows7-x64

1

COCQ/internet.dll

windows10-2004-x64

1

COCQ/krnln.dll

windows7-x64

1

COCQ/krnln.dll

windows10-2004-x64

COCQ/spec.dll

windows7-x64

1

COCQ/spec.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2b9616bf54d6473afb3d89130d58544f_JaffaCakes118

  • Size

    829KB

  • MD5

    2b9616bf54d6473afb3d89130d58544f

  • SHA1

    74df2c908fc28100ae5c96beb25686d9d9594cc9

  • SHA256

    da2bf441d53ada3ea363d2ef25b6ff27c1d002cd883ebf1b9f9729e77351b250

  • SHA512

    45641a6ba2aba25772fcf9d6fbb24d88f3aa7fd69f7cabfcfa53e89bd974853671855f232cf725dba3f7d9dee09357be004c4d937eb300418c67a57ed3c4f5a0

  • SSDEEP

    24576:YCJqQVeNPTadU0mK96iu/+2vrlm+TWNpXv9:Y+qQViPTadrVIizF+TGFv9

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b9616bf54d6473afb3d89130d58544f_JaffaCakes118
    .rar
  • COCQ/COCQ.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • COCQ/EThread.fne
    .dll windows:4 windows x86 arch:x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Exports

    Sections

  • COCQ/SkinH_AttachEx.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • COCQ/TrayIcon.fne
    .dll windows:4 windows x86 arch:x86

    0565c3a8ee20f5230496e578fd4b19d3


    Headers

    Imports

    Exports

    Sections

  • COCQ/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    a8ae28fb7870151eb1647d665ac5f31c


    Headers

    Imports

    Exports

    Sections

  • COCQ/face/QQ1.she
  • COCQ/face/QQ2.she
  • COCQ/face/black.she
  • COCQ/face/china.she
  • COCQ/face/face.she
  • COCQ/iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • COCQ/internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Exports

    Sections

  • COCQ/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • COCQ/pz.ini
  • COCQ/spec.fne
    .dll windows:4 windows x86 arch:x86

    be3fe1d11f8ee4e772d13163095b126a


    Headers

    Imports

    Exports

    Sections