Overview

overview

3

Static

static

3

QQkxnc/COMCTL32.dll

windows7-x64

3

QQkxnc/COMCTL32.dll

windows10-2004-x64

3

QQkxnc/MSCOMCTL.dll

windows7-x64

3

QQkxnc/MSCOMCTL.dll

windows10-2004-x64

3

QQkxnc/MSINET.dll

windows7-x64

3

QQkxnc/MSINET.dll

windows10-2004-x64

3

QQkxnc/MSWINSCK.dll

windows7-x64

3

QQkxnc/MSWINSCK.dll

windows10-2004-x64

3

QQkxnc/QQ�...��.exe

windows7-x64

3

QQkxnc/QQ�...��.exe

windows10-2004-x64

3

QQkxnc/TABCTL32.dll

windows7-x64

3

QQkxnc/TABCTL32.dll

windows10-2004-x64

3

QQkxnc/无...�).bat

windows7-x64

1

QQkxnc/无...�).bat

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    cdfe376c060516201cbbd1fc138ec29f_JaffaCakes118

  • Size

    1.1MB

  • MD5

    cdfe376c060516201cbbd1fc138ec29f

  • SHA1

    b8ce30a498e10daa7959d9421e9e16075f4f878a

  • SHA256

    fb99aec67d04f8f93b967e2540965ea7881bf1cd451884efdae40c7487486991

  • SHA512

    fea194addd0c8c30745a42a32cc544bf3811ab6fbd2883d7493758be54bc3276b88edf54474d70ef06bae62722230266ae46d40b641c0affaa17f5c4edd05b53

  • SSDEEP

    24576:vwvzixaNJStLLfw8098RK+PLEWYJP6RMPUHo1m4UiHRPub:r3LLY8e8RK+PLEWbG8I9HR2

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cdfe376c060516201cbbd1fc138ec29f_JaffaCakes118
    .rar
  • QQkxnc/COMCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    c8cebbf034d8c6304701e5ec3fae70a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQkxnc/MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    2b2ee4e06ab7ae589a670cad99121b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQkxnc/MSINET.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    96286284ff8e040938ba779778d1542e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQkxnc/MSWINSCK.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    cb0275eec9ac31b6d4d44320e576fadb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQkxnc/QQ开心农场小帮手.exe
    .exe windows:4 windows x86 arch:x86

    820ab24e53af2dbafc74d24f87e40262


    Headers

    Imports

    Sections

  • QQkxnc/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    aa8b0ec5b7d56e08d6614ae243221096


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQkxnc/VISTA WIN7 用户不能运行点击.txt
  • QQkxnc/sound/msg.wav
  • QQkxnc/vcode.jpg
    .jpg
  • QQkxnc/无法运行请点我(运行前请解压到文件夹).bat
  • QQkxnc/更新内容.txt