Overview

overview

7

Static

static

7

ARP联盟.url

windows7-x64

1

ARP联盟.url

windows10-2004-x64

1

QQ农场�...��.exe

windows7-x64

5

QQ农场�...��.exe

windows10-2004-x64

5

SkinH_EL.dll

windows7-x64

5

SkinH_EL.dll

windows10-2004-x64

5

官方主页..url

windows7-x64

1

官方主页..url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    011a64eb32bd541bce9ea45ec8c526fd_JaffaCakes118

  • Size

    645KB

  • MD5

    011a64eb32bd541bce9ea45ec8c526fd

  • SHA1

    cc2c7776830e33d164b9847a0aada0e699edfbeb

  • SHA256

    7e204e9afaba334fc45cb6618d2049ac813897da2a10d76af2b54ad28d1a4000

  • SHA512

    3d277831257679bee4fa32805d46d238b6ebe787ebefdfb463da2377282b974f832fb0fd401c4528cd2225001dba3d1462695d04507d5e7c83f026c07a2c00d8

  • SSDEEP

    12288:l89M3HTBw/HdB05odVoxqjxhz2qkroj31jry2eC2sZkAVA4nB:l8iHG/dVosjxh0rojFNeC2sLA4nB

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 011a64eb32bd541bce9ea45ec8c526fd_JaffaCakes118
    .rar
  • ARP联盟.url
  • QQ农场宝贝V2.3去广告版.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • system.ini
  • 官方主页..url