Overview

overview

7

Static

static

7

qqluo_zili...��.exe

windows7-x64

3

qqluo_zili...��.exe

windows10-2004-x64

3

qqluo_zili...sg.dll

windows7-x64

3

qqluo_zili...sg.dll

windows10-2004-x64

3

qqluo_zili...��.url

windows7-x64

1

qqluo_zili...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84f0c95050c4ba51ba904edbae3d5253_JaffaCakes118

  • Size

    497KB

  • MD5

    84f0c95050c4ba51ba904edbae3d5253

  • SHA1

    f4aeac5d05b2fec214a3ab17efbb453d327fbe56

  • SHA256

    51f6016a3b7734fab6f7e4772705378981eb3001504536ca7671a353ad661dfa

  • SHA512

    175a4fd732db4ffec61f993c23cf86cfa6f0a827b9175b26855400b88eb6080f4840727879bd214e5160edea953aaa82b993cd1ecb84bd44ca902dd05f3408e7

  • SSDEEP

    12288:xY59gQflkH8UorPXL+tQ60NuZSYBFG8L2kNCnJCAJCBEexgzi6pLhPh:EgQy8UorfLp60NERFjL2kkYgCuexgzi6

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 84f0c95050c4ba51ba904edbae3d5253_JaffaCakes118
    .rar
  • qqluo_zilishi_V2009/qqluo_zilishi/QQ聊天记录查看器.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • qqluo_zilishi_V2009/qqluo_zilishi/showmsg.dat
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • qqluo_zilishi_V2009/中国破解联盟－木蚂蚁社区.URL
    .url
  • qqluo_zilishi_V2009/使用说明.txt
  • qqluo_zilishi_V2009/注册说明.htm
    .html .js polyglot