General

  • Target

    e2548e5f073037ede94d3b7b503c9c5a_JaffaCakes118

  • Size

    10.1MB

  • MD5

    e2548e5f073037ede94d3b7b503c9c5a

  • SHA1

    5522128691a9740365fa07cbefed4cec75888133

  • SHA256

    b422b498a294bfe77bb03394ada7ced68d957aed88a459fcee89793a507e0ad6

  • SHA512

    8a55c53155b35c57e801db6fd2482522d55eb43b3479c45e262c52ecbbdb1310baf7d7a2b71c172550cd6d9e6631d084132b9c49b2a52af3dd34ba5f9d84318c

  • SSDEEP

    196608:3+NZvLgLawnCssLIPpGJ/VZAkcbtmaGeQvX7yeP:3+NZuawnCrm05yGtdP

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • e2548e5f073037ede94d3b7b503c9c5a_JaffaCakes118
    .rar
  • QQImage/@绿化工具.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/linker.dll
    .dll windows:4 windows x86 arch:x86

    5b9be84907034b8f0152e51177ceafc3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/www.greendown.cn.ini
  • QQImage/Res/AddonConfig/addonNames2IDs.txt
  • QQImage/Res/AddonConfig/addonTypeInfo.txt
  • QQImage/Res/Cursor/ColorDeriving.cur
  • QQImage/Res/Cursor/Forbidden.cur
  • QQImage/Res/Cursor/HScroll.cur
  • QQImage/Res/Cursor/Hand.cur
  • QQImage/Res/Cursor/HandDown.cur
  • QQImage/Res/Cursor/HandPoint.cur
  • QQImage/Res/Cursor/Left.cur
  • QQImage/Res/Cursor/Right.cur
  • QQImage/Res/Cursor/Rotate.cur
  • QQImage/Res/Cursor/VScroll.cur
  • QQImage/Res/Cursor/beam_im.cur
  • QQImage/Res/Cursor/splitter_hor.cur
  • QQImage/Res/Cursor/splitter_ver.cur
  • QQImage/Res/Icon/QIMP.ico
  • QQImage/Res/Icon/QQImage.ico
  • QQImage/Res/Icon/QQImageDoc.ico
  • QQImage/Res/Icon/bmp.ico
  • QQImage/Res/Icon/gif.ico
  • QQImage/Res/Icon/ico.ico
  • QQImage/Res/Icon/jpg.ico
  • QQImage/Res/Icon/pic.ico
  • QQImage/Res/Icon/png.ico
  • QQImage/Res/Icon/psd.ico
  • QQImage/Res/Icon/raw.ico
  • QQImage/Res/Icon/tif.ico
  • QQImage/Res/QQImageConfig/General
  • QQImage/Res/QQImageConfig/ItemControls.xml
    .xml
  • QQImage/Res/QQImageConfig/KeyMap.xml
  • QQImage/Res/QQImageConfig/QPSKIN.XML
    .xml
  • QQImage/Res/ViewConfig/Blue
  • QQImage/Res/ViewConfig/General
  • QQImage/Res/ViewConfig/ItemControls.xml
    .xml
  • QQImage/Res/ViewConfig/KeyMap.xml
  • QQImage/Res/ViewConfig/QPSKIN.XML
    .xml
  • QQImage/Res/ViewConfig/StringMap.xml
    .xml
  • QQImage/Res/ViewConfig/Yellow
  • QQImage/bin/1041/libguide40UI.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • QQImage/bin/2052/libguide40UI.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • QQImage/bin/Extract.dll
    .dll windows:4 windows x86 arch:x86

    102033a12b8cf17a451a9e9760020138


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/FreeImage.dll
    .dll windows:4 windows x86 arch:x86

    f5ebbf8ee54ae08dd14cf4ce5ef8d446


    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/FreeImagePlus.dll
    .dll windows:4 windows x86 arch:x86

    5b6c1b2c29c0595334daabfbfb298d31


    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/License/License_EN.txt
  • QQImage/bin/License/License_FreeImage.txt
  • QQImage/bin/License/License_OpenCV.txt
  • QQImage/bin/License/License_ZH.txt
  • QQImage/bin/Microsoft.VC80.CRT.manifest
  • QQImage/bin/Microsoft.VC80.MFC.manifest
  • QQImage/bin/QPSSO.dll
    .dll windows:4 windows x86 arch:x86

    66607d11b0c62eb3bed4f0ca83debc4c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/QQImage.exe
    .exe windows:4 windows x86 arch:x86

    17af170f1fe6f528db9b9d177b0a9e5c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/QQImageImporter.exe
    .exe windows:4 windows x86 arch:x86

    e1b28bcc0502c53a9dc3c51d20282dbe


    Code Sign

    Headers

    Imports

    Sections

  • QQImage/bin/QQImageUp.exe
    .exe windows:4 windows x86 arch:x86

    a207058feca949c735c58f7481ecd9b2


    Code Sign

    Headers

    Imports

    Sections

  • QQImage/bin/QQImageViewer.exe
    .exe windows:4 windows x86 arch:x86

    cc0ba8c6a8d74c48f1e020c258a4a01b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/QQWeiboAPI.dll
    .dll windows:4 windows x86 arch:x86

    e2d98b0fbeb1c9ee378b1d5b20c7519c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/SingleDict.txt
  • QQImage/bin/TNProxy.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5b6be223aae9558de13dd3a8d5d553f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/TXSSO/InstTXSSOHelper.dll
    .dll windows:4 windows x86 arch:x86

    34adaf4b69b46f4bbfaa692325449a50


    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/TXSSO/InstTXSSO_LUI.exe
    .exe windows:4 windows x86 arch:x86

    7e261c5c244cb3c58fa498f31ba1a026


    Headers

    Imports

    Sections

  • QQImage/bin/TXSSO/bin/SSOCommon.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9600219b47ae230059f1dced546285c6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/TXSSO/bin/SSOLUIControl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5481de71307f7b63b50a67858b79c5a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/TXSSO/bin/SSOPlatform.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    df257bdbfde41c14924eeac3040eb5f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/Tencentdl.exe
    .exe windows:4 windows x86 arch:x86

    20caac9d2625b1151725cf1134fdd659


    Code Sign

    Headers

    Imports

    Sections

  • QQImage/bin/What'sNew.txt
  • QQImage/bin/curllib.dll
    .dll windows:4 windows x86 arch:x86

    e7e76bacda92f81d0eefd0a58978a370


    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/d3dx9_24.dll
    .dll windows:5 windows x86 arch:x86

    b765118b3c0b3118a5fb2c94de57bb9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/dlcore.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    278664a63119b51335e94f5b5a17489b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/dr.dll
    .dll windows:4 windows x86 arch:x86

    e885dc9ea9f2a30c0364a128f9584cb2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/dr.ini
  • QQImage/bin/i18n/zh/zh_CN/StringBundle.xml
  • QQImage/bin/i18nu.dll
    .dll windows:4 windows x86 arch:x86

    a13c9611bf0c5d8ffe5c387b7c2c06c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/mfc80u.dll
    .dll windows:4 windows x86 arch:x86

    45cba60d0833bef75d882d15b2d5a2cd


    Headers

    Imports

    Sections

  • QQImage/bin/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/qqimage.dll
    .dll windows:4 windows x86 arch:x86

    c38944b9146ecedb4e76065ecfb2b537


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/qqimage_ac.dll
    .dll windows:4 windows x86 arch:x86

    7a144674228dc645a51d19b7a1782423


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQImage/bin/tssafeedit.dat
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections