Overview

overview

3

Static

static

3

Form1.vbs

windows7-x64

1

Form1.vbs

windows10-2004-x64

1

Module1.vbs

windows7-x64

1

Module1.vbs

windows10-2004-x64

1

Module2.vbs

windows7-x64

1

Module2.vbs

windows10-2004-x64

1

QQShel/Form1.vbs

windows7-x64

1

QQShel/Form1.vbs

windows10-2004-x64

1

QQShel/Module1.vbs

windows7-x64

1

QQShel/Module1.vbs

windows10-2004-x64

1

QQShel/Module2.vbs

windows7-x64

1

QQShel/Module2.vbs

windows10-2004-x64

1

QQShel/cha...on.vbs

windows7-x64

1

QQShel/cha...on.vbs

windows10-2004-x64

1

QQShel/tuziQQ.exe

windows7-x64

3

QQShel/tuziQQ.exe

windows10-2004-x64

3

QQShel/新...��.url

windows7-x64

1

QQShel/新...��.url

windows10-2004-x64

1

QQShel/窗口.vbs

windows7-x64

1

QQShel/窗口.vbs

windows10-2004-x64

1

chameleonButton.vbs

windows7-x64

1

chameleonButton.vbs

windows10-2004-x64

1

tuziQQ.exe

windows7-x64

3

tuziQQ.exe

windows10-2004-x64

3

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

窗口.vbs

windows7-x64

1

窗口.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    dcb89f619def9c5f7ada94ea6532fcb2_JaffaCakes118

  • Size

    67KB

  • MD5

    dcb89f619def9c5f7ada94ea6532fcb2

  • SHA1

    b62f4299521f17862091897d277f6e23e1e8fd1a

  • SHA256

    918215b358e6dc5f8b58e8aa0dd9bef1b27e11afc711eda5caaa1989202d5af7

  • SHA512

    2a8d4f04226101f47cdf7d1d6ffdf2638bfb57ca7ad2c525a69d992dcad6f3f627fff4982dbc625bae6e48ff5a101682f46e1e4020f59432ceb5d607fe1c0e5b

  • SSDEEP

    1536:QDGIJRJ16kTSWeo5mncNd/K6n9HzPSq6blVZKyXU/w6U:QzSm5UcNd/Dn9H7Sq2U2

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dcb89f619def9c5f7ada94ea6532fcb2_JaffaCakes118
    .rar
  • Form1.frm
    .vbs
  • Form1.frx
  • Form2.frm
  • Module1.bas
    .vbs
  • Module2.bas
    .vbs
  • Module3.bas
  • QQ.ico
  • QQShel/Form1.frm
    .vbs
  • QQShel/Form1.frx
  • QQShel/Form2.frm
  • QQShel/MSSCCPRJ.SCC
  • QQShel/Module1.bas
    .vbs
  • QQShel/Module2.bas
    .vbs
  • QQShel/Module3.bas
  • QQShel/QQ.ico
  • QQShel/chameleonButton.ctl
    .vbs
  • QQShel/chameleonButton.ctx
  • QQShel/tuziQQ.exe
    .exe windows:4 windows x86 arch:x86

    eb8bbb0434ea0685903e7b4a7d161ca2


    Headers

    Imports

    Sections

  • QQShel/下载说明.htm
    .html .js polyglot
  • QQShel/兔子QQ防盗登录器美化版.vbp
  • QQShel/兔子QQ防盗登录器美化版.vbw
  • QQShel/关于.txt
  • QQShel/新云软件.url
    .url
  • QQShel/窗口.bas
    .vbs
  • chameleonButton.ctl
    .vbs
  • chameleonButton.ctx
  • tuziQQ.exe
    .exe windows:4 windows x86 arch:x86

    eb8bbb0434ea0685903e7b4a7d161ca2


    Headers

    Imports

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 兔子QQ防盗登录器美化版.vbp
  • 兔子QQ防盗登录器美化版.vbw
  • 关于.txt
  • 新云软件.url
    .url
  • 窗口.bas
    .vbs