General

  • Target

    a27ab447ad77580d62fe7891f48969e0_JaffaCakes118

  • Size

    802KB

  • MD5

    a27ab447ad77580d62fe7891f48969e0

  • SHA1

    f63f7dd5dd75958b2677235e39b2e2115ab6bee2

  • SHA256

    f1307cd7490f0fb809fa7f038b1c97039026d0f7063480e98d1b288322f9127f

  • SHA512

    e61ee322244110e5921f565ab6d8874b006c1362361a3356595d90adefb88a0e4de661454ee5327034ad169b35b04e4866008fcda8c592145837a7b300c6452c

  • SSDEEP

    24576:iyYBeJRyPnoQdSJwHHWP9fZger+cnw1ZpD:GeaPKJMWP5ZgeREV

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a27ab447ad77580d62fe7891f48969e0_JaffaCakes118
    .rar
  • QQ牧夫 V3.00/animal.xml
    .xml
  • QQ牧夫 V3.00/ii23购物街促销秒杀.url
  • QQ牧夫 V3.00/mc_crop.xml
    .xml
  • QQ牧夫 V3.00/qqmf.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQ牧夫 V3.00/qqmf.up
  • QQ牧夫 V3.00/保留原配置及账号方法、帮助文档.txt
  • QQ牧夫 V3.00/免责声明.txt
  • QQ牧夫 V3.00/新云软件.url
    .url
  • QQ牧夫 V3.00/无法打开或报毒请看.txt
  • QQ牧夫 V3.00/更新日志.txt
  • QQ牧夫 V3.00/淘宝购物小帮手.url