Overview

overview

7

Static

static

7

qcxzz1.33/...��.exe

windows7-x64

7

qcxzz1.33/...��.exe

windows10-2004-x64

7

qcxzz1.33/...EL.dll

windows7-x64

7

qcxzz1.33/...EL.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5fbab26992825ec0ed6bffc611d3f1e9_JaffaCakes118

  • Size

    420KB

  • MD5

    5fbab26992825ec0ed6bffc611d3f1e9

  • SHA1

    33302bbb8cae472b2a5af6a4d6c2d8a8680e3460

  • SHA256

    2446120eb51e60ed89cba3186af529aacc3f582a8442901765cdab2b116f10ed

  • SHA512

    8d2821ef87b3aa8c58f7422e13ca12ff5a739215c5423674227d9ec28932a5c1fef53816577dc481de59363ab7cfb9fae4ba1bb2e15a952c7181056042f5ad71

  • SSDEEP

    12288:4KDkvUb7emPm4aFEcphkvsEEyoai3K29eFL:4KDkMb7emP1UvEEyx2K29eFL

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fbab26992825ec0ed6bffc611d3f1e9_JaffaCakes118
    .rar
  • qcxzz1.33/Q宠小助手.exe
    .exe windows:4 windows x86 arch:x86

    c3174e1a485bdf36399057d31f8ca7ae


    Headers

    Imports

    Sections

  • qcxzz1.33/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • qcxzz1.33/china.she