Overview

overview

7

Static

static

7

tntn-v2.24.exe

windows7-x64

7

tntn-v2.24.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

QQCrazyDouble.dll

windows7-x64

3

QQCrazyDouble.dll

windows10-2004-x64

3

QQCrazyLord.dll

windows7-x64

3

QQCrazyLord.dll

windows10-2004-x64

3

QQDdzrpg.dll

windows7-x64

3

QQDdzrpg.dll

windows10-2004-x64

3

QQDdzrpgD.dll

windows7-x64

3

QQDdzrpgD.dll

windows10-2004-x64

3

QQDig.dll

windows7-x64

3

QQDig.dll

windows10-2004-x64

3

QQDouble.dll

windows7-x64

3

QQDouble.dll

windows10-2004-x64

3

QQDoubleRpg.dll

windows7-x64

3

QQDoubleRpg.dll

windows10-2004-x64

3

QQHappyLord.dll

windows7-x64

3

QQHappyLord.dll

windows10-2004-x64

3

QQHlddz.dll

windows7-x64

3

QQHlddz.dll

windows10-2004-x64

3

QQHs.dll

windows7-x64

3

QQHs.dll

windows10-2004-x64

3

QQLord.dll

windows7-x64

3

QQLord.dll

windows10-2004-x64

3

QQNewsSJRPG.dll

windows7-x64

3

QQNewsSJRPG.dll

windows10-2004-x64

3

QQRush.dll

windows7-x64

3

QQRush.dll

windows10-2004-x64

3

QQThree.dll

windows7-x64

3

QQThree.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    cf96adf65fd3b1bc58094fa632a3af22_JaffaCakes118

  • Size

    1.7MB

  • MD5

    cf96adf65fd3b1bc58094fa632a3af22

  • SHA1

    81e11bb69cc4af02ce1935af4c0e7c104db33085

  • SHA256

    da59e3d56e9a5e740c0b370ec555eddbe09b6c58c5883dc45ca4ff77308baced

  • SHA512

    4b7fee985f12fe06c30ab87749a9bce5c1d0a1a09765868866204d94b98b9bf635c03b5bc071c98faad961b42885bc075f8b2c6655d10679c3ce1ecb288562a7

  • SSDEEP

    24576:N9WCW5jkdgTcTcoJ+fD9fFMVvrlD/+0RNtND1YeEaxEBJ3Mmy2PMHTEFCOK6L:0CdJTce+f5fe1U0RvND1/ABHaIFCh6

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 17 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • cf96adf65fd3b1bc58094fa632a3af22_JaffaCakes118
    .zip
  • tntn-v2.24.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • LE4-BLACKC.skn
  • LE4-DEFAULT.skn
  • Longhorn Style-BLUE.skn
  • QQCrazyDouble.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQCrazyLord.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDdzrpg.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDdzrpgD.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDig.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDouble.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDoubleRpg.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQHappyLord.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQHlddz.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQHs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQLord.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQNewsSJRPG.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQRush.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQThree.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQVHLDDZ.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQWk.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQward.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Set.ini
  • TNJPQ.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • VistaXP-VISTAXPB2.skn
  • default.skn
  • iTunes.skn
  • luna-BLUE.skn
  • luna-HOMESTEAD.skn
  • luna-METALLIC.skn
  • macos.skn
  • mxskin24.skn
  • mxskin26.skn
  • mxskin68.skn
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • ˵.htm
    .html .js polyglot