Overview

overview

3

Static

static

3

QQ空间�...32.dll

windows7-x64

3

QQ空间�...32.dll

windows10-2004-x64

3

QQ空间�...32.dll

windows7-x64

3

QQ空间�...32.dll

windows10-2004-x64

3

QQ空间�...TL.dll

windows7-x64

3

QQ空间�...TL.dll

windows10-2004-x64

3

QQ空间�...ET.dll

windows7-x64

3

QQ空间�...ET.dll

windows10-2004-x64

3

QQ空间�...CK.dll

windows7-x64

3

QQ空间�...CK.dll

windows10-2004-x64

3

QQ空间�...ng.exe

windows7-x64

3

QQ空间�...ng.exe

windows10-2004-x64

3

QQ空间�...��.bat

windows7-x64

3

QQ空间�...��.bat

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2f4c29d32173129458baa9950a305d7_JaffaCakes118

  • Size

    799KB

  • MD5

    d2f4c29d32173129458baa9950a305d7

  • SHA1

    db1350c96e5956ce10bbedee497b74e1486d7cd8

  • SHA256

    241923e6a0bfa4fa7f655142cf4291c821dd26fa5093e6b9b9dc9fc1500559b8

  • SHA512

    49cf038451a33d4e7efa6a665259facc4f0d3afb7321f12d89ae5cb825bef8acd5f0ce15cb91cfc726d1bf6d62552163548a2048f0972a68f4f84edcc084bde6

  • SSDEEP

    12288:QC1b+eC5XG2ApHGYSWqZRS9X9ZXVeHd2ZBuqxrzRd/sa6izKMn71MH+:Qj29FpaRS5XVeHwZBDrzRBs5qKMnme

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d2f4c29d32173129458baa9950a305d7_JaffaCakes118
    .rar
  • QQ空间全能助手/COMCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    c8cebbf034d8c6304701e5ec3fae70a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ空间全能助手/COMDLG32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ空间全能助手/MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    2b2ee4e06ab7ae589a670cad99121b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ空间全能助手/MSINET.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    96286284ff8e040938ba779778d1542e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ空间全能助手/MSWINSCK.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    cb0275eec9ac31b6d4d44320e576fadb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ空间全能助手/QQ空间全能助手2.3 去广告 by Loading.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQ空间全能助手/VISTA WIN7 用户不能运行点击.txt
  • QQ空间全能助手/vcode.jpg
    .jpg
  • QQ空间全能助手/使用说明.txt
  • QQ空间全能助手/无法运行请点我.bat
  • QQ空间全能助手/更新内容.txt