Behavioral task
behavioral1
Sample
qqhaoyougj/QQ好友攻击器免费版1.0.exe
Resource
win7-20240705-en
General
-
Target
96238a7b5bcbd843b321d262220fdb67_JaffaCakes118
-
Size
932KB
-
MD5
96238a7b5bcbd843b321d262220fdb67
-
SHA1
9ca68aecf168ca9bae53f4994b8c9ca56b02cc99
-
SHA256
4ef133006ce29bc347b91f9e0a50ef468436136828e1f6ef93330f7c4b800e27
-
SHA512
29ea7fdc9ec945dd49ec04f15ea0cc42201e04e6e200903a61014a8acc1eac4a78c53ba6cb5a6dc0cd73ec250fb629ae84ac6172b8ee60c13a303004c89ff1d3
-
SSDEEP
24576:CfWfbjhOd86Flrl4unNISMAglcqMD1RBXBIbuQdPNJN:CfWRO66FlreuNPGGD3BX2SYPN3
Malware Config
Signatures
-
resource yara_rule static1/unpack001/qqhaoyougj/QQ好友攻击器免费版1.0.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/qqhaoyougj/QQ好友攻击器免费版1.0.exe unpack002/out.upx
Files
-
96238a7b5bcbd843b321d262220fdb67_JaffaCakes118.rar
-
qqhaoyougj/QQ好友攻击器免费版1.0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 432KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 945KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 448KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 704KB - Virtual size: 701KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
qqhaoyougj/使用方法.txt
-
qqhaoyougj/软件介绍.txt