Overview

overview

7

Static

static

7

QQMoTiandl.exe

windows7-x64

7

QQMoTiandl.exe

windows10-2004-x64

7

SkinH_VB6.dll

windows7-x64

7

SkinH_VB6.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    afa0a4832817654ab5876dbe18024c30_JaffaCakes118

  • Size

    441KB

  • MD5

    afa0a4832817654ab5876dbe18024c30

  • SHA1

    c99601afc29a029b3f83a44e54016f3dc241b124

  • SHA256

    dc6e2e91881de7530f02c5c6c0661e6bc60d20056230be3b4a896fef98491398

  • SHA512

    f323999799b34a43ca8602e5a673938be2a7bedf16bf9d486b751a7a21eeb8c612925dcb1644d0b7c1a42b5df35a35a70b99b1950586567b521102a9cebf76c6

  • SSDEEP

    12288:lPEs2fLLJZofKlf7NLM50t4fpXz2Hxhz/Bu:tEsGLzD7ZMit4FqPzc

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • afa0a4832817654ab5876dbe18024c30_JaffaCakes118
    .zip
  • QQMoTiandl.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SkinH_VB6.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ĵ.txt
  • ɱ.txt
  •  .txt
  • ˵.htm
    .html .js polyglot