Overview

overview

7

Static

static

7

tntn_Setup_1_29.exe

windows7-x64

7

tntn_Setup_1_29.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

QQCrazyDouble.dll

windows7-x64

3

QQCrazyDouble.dll

windows10-2004-x64

3

QQCrazyLord.dll

windows7-x64

3

QQCrazyLord.dll

windows10-2004-x64

3

QQDdzrpg.dll

windows7-x64

3

QQDdzrpg.dll

windows10-2004-x64

3

QQDdzrpgD.dll

windows7-x64

3

QQDdzrpgD.dll

windows10-2004-x64

3

QQDig.dll

windows7-x64

3

QQDig.dll

windows10-2004-x64

3

QQDouble.dll

windows7-x64

3

QQDouble.dll

windows10-2004-x64

3

QQDoubleRpg.dll

windows7-x64

3

QQDoubleRpg.dll

windows10-2004-x64

3

QQHappyLord.dll

windows7-x64

3

QQHappyLord.dll

windows10-2004-x64

3

QQHs.dll

windows7-x64

3

QQHs.dll

windows10-2004-x64

3

QQLord.dll

windows7-x64

3

QQLord.dll

windows10-2004-x64

3

QQNewsSJRPG.dll

windows7-x64

3

QQNewsSJRPG.dll

windows10-2004-x64

3

QQRush.dll

windows7-x64

3

QQRush.dll

windows10-2004-x64

3

QQThree.dll

windows7-x64

3

QQThree.dll

windows10-2004-x64

3

QQVHLDDZ.dll

windows7-x64

3

QQVHLDDZ.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffbc6973adb4349e336138bbf690287e_JaffaCakes118

  • Size

    1.6MB

  • MD5

    ffbc6973adb4349e336138bbf690287e

  • SHA1

    a71c96d383c3396da82cfe196c23f2f444a35de7

  • SHA256

    33bdfa1aacb163cc66c97ea76614a4d3946fb868fc4424878bb8d42521b53283

  • SHA512

    3f29bf1f4f7ab6431b9add1602df04a3632a68543495f4eef448abfe6fc84dd9b66ccbee26ed89731f51a0b6c22aa52f1254c7181b60cfc6a5531c668afb9c7b

  • SSDEEP

    24576:KGye9oAzA8M/E7RqTxLRXdpCq2GGt+fX//OutvvCku6WTppyA3GgCSRDuPh7miQ:zcLTE+KqTx/LCppZ3DCSRDupSZ

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 16 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • ffbc6973adb4349e336138bbf690287e_JaffaCakes118
    .rar
  • tntn_Setup_1_29.exe
    .exe windows:4 windows x86 arch:x86

    9b89b73a2bd2f3c9338530bbd4a212f0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • LE4-BLACKC.skn
  • LE4-DEFAULT.skn
  • Longhorn Style-BLUE.skn
  • QQCrazyDouble.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQCrazyLord.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDdzrpg.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDdzrpgD.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDig.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDouble.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQDoubleRpg.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQHappyLord.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQHs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQLord.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQNewsSJRPG.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQRush.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQThree.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQVHLDDZ.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQWk.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQward.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • TNJPQ.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • VistaXP-VISTAXPB2.skn
  • default.skn
  • iTunes.skn
  • luna-BLUE.skn
  • luna-HOMESTEAD.skn
  • luna-METALLIC.skn
  • macos.skn
  • mxskin24.skn
  • mxskin26.skn
  • mxskin68.skn
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    9b89b73a2bd2f3c9338530bbd4a212f0


    Headers

    Imports

    Sections

  • 新云软件.url
    .url