Overview

overview

3

Static

static

3

2011最给...��.url

windows7-x64

1

2011最给...��.url

windows10-2004-x64

1

咪兔QQ�...18.exe

windows7-x64

1

咪兔QQ�...18.exe

windows10-2004-x64

3

咪兔QQ�...ky.exe

windows7-x64

1

咪兔QQ�...ky.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    066c51acdd6b6b3013a79ba05a3ec317_JaffaCakes118

  • Size

    2.5MB

  • MD5

    066c51acdd6b6b3013a79ba05a3ec317

  • SHA1

    6da303c2ca4dd4e559ac80806ff0f464a3dc6aef

  • SHA256

    3cd1b30202631c8bc069cd90b5645f2412f1c3588c015d45ef72ce6943d77033

  • SHA512

    ff74c8f2a02a5b13d4a4e9d20d35ff6ce507c4f05e898a96a3341e2d69993ca3a3b1e3046378c47a5191b0a988ba435adefccae2a3e0a8b8c3a3cec23c712b3b

  • SSDEEP

    49152:GzRlKNz0ICEgpTaJlZ8O+XwTUxygVRLVLDVC77+2OL89:GzRlKNYndpTaPGKeyiRJV86RC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 066c51acdd6b6b3013a79ba05a3ec317_JaffaCakes118
    .rar
  • 2011最给力在线小游戏.url
  • 咪兔QQ游戏中国象棋助手/AIEngine/佳佳快棋版/gg20100218.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • 咪兔QQ游戏中国象棋助手/AIEngine/倚天高级版/cyclone.ini
  • 咪兔QQ游戏中国象棋助手/AIEngine/倚天高级版/deepsky.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 咪兔QQ游戏中国象棋助手/AIEngine/倚天高级版/deepsky.ini