Overview

overview

7

Static

static

7

QQ魔卡�...��.exe

windows7-x64

7

QQ魔卡�...��.exe

windows10-2004-x64

7

QQ魔卡�...B6.dll

windows7-x64

7

QQ魔卡�...B6.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e4cef0da838c6ed39cc98f9f0a89784_JaffaCakes118

  • Size

    534KB

  • MD5

    3e4cef0da838c6ed39cc98f9f0a89784

  • SHA1

    ad575198c9498b183b8187b678565d3b93fa6f24

  • SHA256

    4914b11a0afa8d29d5d55b9f2c0ba53aea10e4c2dd01ac92c593a337d4b35bc8

  • SHA512

    a537a972a2ddc47582bc796b9e53d469c8990136dfa377653a4ccf8ecfa43b32aa023e002e1b101673d92e4f6211c1b9d8d27fe12632c5139a305020cd3bbb63

  • SSDEEP

    12288:JDmO85ZQwDcmzqna+zuuxz9rymZdebwidL6uP/KGVMXrahLVhde:4O85F4+ga+zukRrtdebrLnYrGk

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e4cef0da838c6ed39cc98f9f0a89784_JaffaCakes118
    .rar
  • QQ魔卡宝贝/QQ魔卡宝贝.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQ魔卡宝贝/SkinH_VB6.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQ魔卡宝贝/mrls.mp3
  • QQ魔卡宝贝/免责声明 .txt