Overview

overview

5

Static

static

5

QQ牧夫 V...mf.exe

windows7-x64

5

QQ牧夫 V...mf.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    feac8334890c29074e1acb99073c05cf_JaffaCakes118

  • Size

    754KB

  • MD5

    feac8334890c29074e1acb99073c05cf

  • SHA1

    875b102c3a220e6ecc19e42aa20efe365dc17d85

  • SHA256

    52d3aa1cf796dba66df0658d1e0ec726542b61208ccaf737ee9267f3bfe06558

  • SHA512

    edd7dac56db45fbdfad425439d4b941cd5d59bcddddb423f3121803dfca65733f6edaed8a538bcc632f2212444595888e0bb50a3079bf695b78d2f3814d2ed44

  • SSDEEP

    12288:/HGEKcEyotc+42KNFPbpMa0Eb1g2b/0Xvu5W2vQtJ8Ys+IFpxGpAnzzj10IOl6ik:fxKcEyotF42WM/krb/0Xvu5vA1EvOAnD

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • feac8334890c29074e1acb99073c05cf_JaffaCakes118
    .rar
  • QQ牧夫 V2.84/qqmf.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQ牧夫 V2.84/qqmf_up.db
  • QQ牧夫 V2.84/保留原配置及账号方法、帮助文档.txt
  • QQ牧夫 V2.84/免责声明.txt
  • QQ牧夫 V2.84/无法打开或报毒请看.txt
  • QQ牧夫 V2.84/更新日志.txt