General

  • Target

    2ff2c5ca2cb1dfcb3b8f97f4a42b57ef_JaffaCakes118

  • Size

    773KB

  • MD5

    2ff2c5ca2cb1dfcb3b8f97f4a42b57ef

  • SHA1

    bb4fbde84ad23e712607fce3c69d7f6556df38d9

  • SHA256

    cbe298ef5f93c1b10b0d374813a5dcc1dbbb4ed3a9eff6c63e66aa8ca2d0a42e

  • SHA512

    e4b2ae1dbdc3a12f86803f6e1c6c1b8937972c2a8bda218e02669d16320dca86c1a4669171aebdaff7d624253c51b4a75c5251fd09c5f70ef2cd675db29d2ac9

  • SSDEEP

    24576:AFeXheiKcMklNMVq5upJetjMPHXryC2tUgBJPfQBH:ASB7leE56JeMXOC22gjPfK

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ff2c5ca2cb1dfcb3b8f97f4a42b57ef_JaffaCakes118
    .rar
  • QQ摩天大楼伴侣 V2.37/CH.xml
  • QQ摩天大楼伴侣 V2.37/mt_config.xml
    .xml
  • QQ摩天大楼伴侣 V2.37/mtbanlv.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQ摩天大楼伴侣 V2.37/mtbanlv_up.db
  • QQ摩天大楼伴侣 V2.37/mtconfig.ini
  • QQ摩天大楼伴侣 V2.37/保留原配置及账号方法、帮助文档.txt
  • QQ摩天大楼伴侣 V2.37/免责声明.txt
  • QQ摩天大楼伴侣 V2.37/无法打开或报毒请看.txt
  • QQ摩天大楼伴侣 V2.37/更新日志.txt