General

  • Target

    d71ce04bfcbe0878213a4d901ba8e20e_JaffaCakes118

  • Size

    2.2MB

  • MD5

    d71ce04bfcbe0878213a4d901ba8e20e

  • SHA1

    1aed01d751c248944ed36ff665b9a734ce508d2b

  • SHA256

    8bcd6e964c32848aeddf4dc18647236c23c65fcfee4ec0af9fc29558428c4965

  • SHA512

    3ea0d5270a00ce50f7301244a550e1fc742066a2330cf447edf0f14c3a271313c6f89d520da12e37af4b1c27e9f359ea6473bfdcf448b3c936252ba6fbfe80b2

  • SSDEEP

    49152:8KBxe2wxpNecKbvm/YF/iIZm531AxVrn9OgeK1jB+aqMPLqbLgubsT4VCzuaxX3p:PEx7e4i/s3fKVHqMPLqXguQ0VCr3MO2i

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • d71ce04bfcbe0878213a4d901ba8e20e_JaffaCakes118
    .rar
  • KillQQAd 1.0.0.40/HKDlls/CoralWry.dat
  • KillQQAd 1.0.0.40/HKDlls/KQAdTray.exe
    .exe windows:4 windows x86 arch:x86

    7c70960c10176052975d978c121fac90


    Headers

    Imports

    Sections

  • KillQQAd 1.0.0.40/HKDlls/KillQQAd.dll
    .dll windows:4 windows x86 arch:x86

    9bbfe7f8b664db1dcdfd6e46f5396b2d


    Headers

    Imports

    Sections

  • KillQQAd 1.0.0.40/HKDlls/KillQQAd.ini
  • KillQQAd 1.0.0.40/HKDlls/KillQQAd.xml
    .xml
  • KillQQAd 1.0.0.40/HKDlls/Version.ini
  • KillQQAd 1.0.0.40/HKPatch/KillQQAd.hki
  • KillQQAd 1.0.0.40/HookQQ.dll
    .dll windows:5 windows x86 arch:x86

    201beb53817b2cbdccbabc43baccbc91


    Headers

    Imports

    Exports

    Sections

  • KillQQAd 1.0.0.40/KernelUtil.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections