Overview

overview

7

Static

static

7

nc4.0/QQFa...er.dll

windows7-x64

7

nc4.0/QQFa...er.dll

windows10-2004-x64

7

nc4.0/QQ�...��.exe

windows7-x64

7

nc4.0/QQ�...��.exe

windows10-2004-x64

7

nc4.0/SkinH.dll

windows7-x64

7

nc4.0/SkinH.dll

windows10-2004-x64

7

nc4.0/新�...��.url

windows7-x64

1

nc4.0/新�...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8e2dc61258433b482a0ed19d5359f82_JaffaCakes118

  • Size

    783KB

  • MD5

    c8e2dc61258433b482a0ed19d5359f82

  • SHA1

    61cfbb04e6c43c281f38d8aa2e313c931e7e24a1

  • SHA256

    1776c27d45d163c309ce90e214ba34bb348d1a841b91bad021a92a1c2ee87369

  • SHA512

    6f6813e7b08b02ac03d0b9fc230730ded38df5c192144d095a127bea31e7a2dd89bfefcca94f5bc0d0407b9c279700497a4be022a1e762b6e34c8bf013dcef36

  • SSDEEP

    24576:Qt9vNge/nL3vlVert3qYaYRVtBi4SbXcJxhh:Qt9Fge/OrtadgtrSbgXh

Score
7/10
aspackv2upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • c8e2dc61258433b482a0ed19d5359f82_JaffaCakes118
    .rar
  • nc4.0/QQFarmeHelper.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • nc4.0/QQ农场大师.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • nc4.0/SkinH.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • nc4.0/sound/音频1.wav
  • nc4.0/sound/音频2.wav
  • nc4.0/sound/音频3.wav
  • nc4.0/system.ini
  • nc4.0/新云软件.url
    .url