Overview

overview

4

Static

static

3

YS_QMZZ/Qmzz.exe

windows7-x64

4

YS_QMZZ/Qmzz.exe

windows10-2004-x64

4

YS_QMZZ/�...��.url

windows7-x64

1

YS_QMZZ/�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2da86bd4f4b5fa18a795966127a401d6_JaffaCakes118

  • Size

    3.1MB

  • MD5

    2da86bd4f4b5fa18a795966127a401d6

  • SHA1

    596b6c12908af8de338700d0bfff37fb4d1a7dd6

  • SHA256

    38d29c56337b346651d1a46c12dd5963e7bf11b5adb02d344961c76102bf9ebf

  • SHA512

    1e923c12733b31d3dcc531e71377051d33b07d053ce67d0b3e0f968a40477e861d723a3a7ba4f5dadae106d4520ded3bc352239a88589dda919e0715c45117ff

  • SSDEEP

    49152:n1FHl8lVl+0JYHlX4j7AGBEMtO+tpUPUykVrVDSgl8I5eBa3q3AR7JM:nl8lVl+jHGwRMtOupUkjDSgeI5YaYAvM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2da86bd4f4b5fa18a795966127a401d6_JaffaCakes118
    .rar
  • YS_QMZZ/BG.DAT
  • YS_QMZZ/BH.IDX
  • YS_QMZZ/BJX.DAT
  • YS_QMZZ/HZ.DAT
  • YS_QMZZ/PY.IDX
  • YS_QMZZ/QMZZ.CNT
  • YS_QMZZ/QMZZ.HLP
  • YS_QMZZ/QMzz.GID
  • YS_QMZZ/Qmzz.exe
    .exe windows:4 windows x86 arch:x86

    5a498eee87e4d89512a84502f500181f


    Headers

    Imports

    Sections

  • YS_QMZZ/TEXT.DAT
  • YS_QMZZ/WG.DAT
  • YS_QMZZ/YYL.DAT
  • YS_QMZZ/guaCFG.DAT
  • YS_QMZZ/新云软件.url
    .url