General

  • Target

    dbe5b68bd969ce937c90db0759885e59_JaffaCakes118

  • Size

    1.0MB

  • MD5

    dbe5b68bd969ce937c90db0759885e59

  • SHA1

    57ddae399008a69fcbae4b962c09b84368b801f2

  • SHA256

    ad5a7b298119bd26ba84f7ab16ae21bed921e4d6be989ca7b35b3b7bc913b681

  • SHA512

    b06614789096a7df3d0b03c052f0fa9b84c5cf20e4221772bccaa91c73f81a679ac7bca15117b751cf60ab32c25cff0583b0b9d75a4f99977e03a665bcff349b

  • SSDEEP

    24576:nFltO6Rf7942CyX/EwX5rMBBdRC4QREiGXJfuqJJU:nFl8+SZyvLtMvdA4QREi9qQ

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • dbe5b68bd969ce937c90db0759885e59_JaffaCakes118
    .rar
  • CoralWry.dat
  • IPSearcher.dll
    .dll windows:4 windows x86 arch:x86

    daed958abd18ee45042d210e9c319d51


    Headers

    Imports

    Exports

    Sections

  • IPSearcher.ini
  • KfApp.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • KfConfig.xml
    .xml
  • KfQQ.exe
    .exe windows:4 windows x86 arch:x86

    8f1953e72565fb16ecfd4edf5bad81ce


    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
    .xml
  • MyIP.dat
  • QQ2007 正式版 (7.0.431.400).kfsig
    .xml
  • QQ2007II Beta1 (7.1.518.201).kfsig
    .xml
  • QQ2007II Beta2 (7.1.575.202).kfsig
    .xml
  • QQ2007II Beta2 (7.1.577.202).kfsig
    .xml
  • QQ2007II Beta2 SP1 (7.1.576.202).kfsig
    .xml
  • QQ2007II Beta2 SP1 (7.1.578.202).kfsig
    .xml
  • QQ2007II 正式版 (7.1.633.400).kfsig
    .xml
  • QQ2007II 正式版 (7.1.643.400).kfsig
    .xml
  • Version.ini
  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    9fb682fe34f5d965faf4cf424fa6c000


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    8eb98c77a1ada89df5027bd5bf01c2f6


    Headers

    Imports

    Exports

    Sections

  • 使用说明.txt
  • 新云软件.url
    .url
  • 版本说明.txt