Overview

overview

7

Static

static

3

Hjqq_V3.6.1_crsky.exe

windows7-x64

7

Hjqq_V3.6.1_crsky.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Config.exe

windows7-x64

3

Config.exe

windows10-2004-x64

3

Hujiao.dll

windows7-x64

3

Hujiao.dll

windows10-2004-x64

3

SonicUI.dll

windows7-x64

3

SonicUI.dll

windows10-2004-x64

3

msimg32.dll

windows7-x64

3

msimg32.dll

windows10-2004-x64

3

patcher.exe

windows7-x64

3

patcher.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

QQ.exe

windows7-x64

3

QQ.exe

windows10-2004-x64

3

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd79836c324c6054236dc019289d9fab_JaffaCakes118

  • Size

    3.4MB

  • MD5

    fd79836c324c6054236dc019289d9fab

  • SHA1

    d5f050d83e409d3c5de85d9e4dd516c87f43e2ea

  • SHA256

    e08c3626a1c31d7d41230206b82c57827140827dc766dfbeb5f14722bfe2c7c3

  • SHA512

    6ec61f773f140382250c8bf5cc71d9efd5834ad80a1c4b57c84b574e4d3cc10257c18eb568ffb837be68b7ce1d0fd1b7c6a44ec7ab5b660e5318f5923b67006b

  • SSDEEP

    98304:Kxs/uhewPaq/qYHSIU9dpN9idqGBeaRwOWu/+4H:Us/8spdpNS93wO1/vH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • fd79836c324c6054236dc019289d9fab_JaffaCakes118
    .rar
  • Hjqq_V3.6.1_crsky.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Config.exe
    .exe windows:4 windows x86 arch:x86

    d5e1ef0baec9a8cc8993049e45852d3e


    Headers

    Imports

    Sections

  • Hujiao.dll
    .dll windows:4 windows x86 arch:x86

    280db42aecbdf29f0bbc4ca7b71aae43


    Headers

    Imports

    Exports

    Sections

  • IP.dat
  • Images/test.gif
    .gif
  • SonicUI.dll
    .dll windows:4 windows x86 arch:x86

    74221c16baa74dd71b258ced7a9ccc64


    Headers

    Imports

    Exports

    Sections

  • UserData/UserExtension
  • UserData/UserInfo
  • Version.ini
  • mar
  • msimg32.dll
    .dll windows:4 windows x86 arch:x86

    8070b8b77306c55ee711159236577a12


    Headers

    Imports

    Exports

    Sections

  • patcher
    .exe windows:4 windows x86 arch:x86

    6493cb688fd049c6279aa57afe5f984d


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • QQ.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url