Overview

overview

7

Static

static

7

QQMoTiandl.exe

windows7-x64

7

QQMoTiandl.exe

windows10-2004-x64

7

SkinH_VB6.dll

windows7-x64

7

SkinH_VB6.dll

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    63066ebbcbb6e449f5efce4d2858e170_JaffaCakes118

  • Size

    418KB

  • MD5

    63066ebbcbb6e449f5efce4d2858e170

  • SHA1

    4e1cefbde54beb1c3b4677b3fda7fcd73f64cf39

  • SHA256

    e844fedd63e0d148527ad1904ff1054cde68be2bfe786d674e1d9cc1a85f0b2a

  • SHA512

    7e7cc7c3e0a6599ee717ffcfbcffa80e17a7159c52609eeae544140937afffc38a42612c3831119091cddbed3999f8b7c2dea3de353e475e78166cee379a0722

  • SSDEEP

    6144:NLKzdNIF1wObwGnd4EQQudpkw544MhY6FWKWf8K5E8BE/Kd8vg7NFoBxDu0Of08K:JDmO85ZQwJcMKGHuQkBxC4RCjGare

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 63066ebbcbb6e449f5efce4d2858e170_JaffaCakes118
    .rar
  • QQMoTiandl.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SkinH_VB6.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 免责声明 .txt
  • 关于杀毒软件误报.txt
  • 帮助文档.txt
  • 新云软件.url
    .url