General

  • Target

    7621a0916384bf1f9fd8c5cd57d03b57_JaffaCakes118

  • Size

    276KB

  • MD5

    7621a0916384bf1f9fd8c5cd57d03b57

  • SHA1

    8a496b4292460f99041176a649ea9c3967e3ffbf

  • SHA256

    1e329e534086a23fc6a02b244c86e172d4a347b96dd4d430f465f22009540fc1

  • SHA512

    9e1d5935ea63c0f81e8189f13d34d6bfe3c580606446cee1db951a80a4041e0cc73055bc30a57157f8f9abee8975fce2c397a86002a5dae68ddd913ea60ced89

  • SSDEEP

    6144:tXWzM80W9WNq45HV1XiOXmIZNIlmkvPwwK8Ee0Fa+:5U0W9WzRVZifIPcmkU8FEv

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 6 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 7621a0916384bf1f9fd8c5cd57d03b57_JaffaCakes118
    .rar
  • IPShow.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Sections

  • IPShow.ini
  • MSIMG32.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQFun.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Sections

  • QQHook.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQHook.ini
  • 好友上线下线提醒插件.zip
    .zip
  • QQStatus.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQStatus.ini
  • Ѳʹ˵.txt
  • 必看使用说明(QQFun).txt
  • 新云软件.url
    .url
  • 聊天监视器组件.zip
    .zip
  • IMRecord.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ʹ˵.txt