General

  • Target

    24ea07b9e67d6f0ec48e96de5b37a173_JaffaCakes118

  • Size

    3.3MB

  • MD5

    24ea07b9e67d6f0ec48e96de5b37a173

  • SHA1

    3fd7cbe4d13dbba0a8491b534115c458cb0a4ffb

  • SHA256

    40031ebb8c7198c154356643e43cf240218750a7011978621bfc9e805791d89e

  • SHA512

    46f165d77ca07a6647415dd215cf87a678d87c4e0a40ab995bc081795f6069ee46c300d0162f4b0a003fe90121dcb1b056ad6d52599623ebe623651f21155790

  • SSDEEP

    98304:4D7/KGmkQnKKTMAKbHTBODYpRRherCieF:oC9TgHTBOD2erCieF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 24ea07b9e67d6f0ec48e96de5b37a173_JaffaCakes118
    .rar
  • qqqngcngr/FireQQ堂外挂/Fire QQ堂4.2外挂/Fire QQ堂4.2外挂.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • qqqngcngr/FireQQ堂外挂/Fire QQ堂4.2外挂/★使用说明☆.txt
  • qqqngcngr/FireQQ堂外挂/Fire QQ堂4.2外挂/修复公告!.txt
  • qqqngcngr/FireQQ堂外挂/Fire QQ堂4.2外挂/脚本/uservar.ini
  • qqqngcngr/FireQQ堂外挂/Fire QQ堂4.2外挂/脚本/永冬之颠险挂机脚本.ini
  • qqqngcngr/FireQQ堂外挂/Fire QQ堂4.2外挂/脚本/高仿技术穿泡脚本.exe
    .exe windows:4 windows x86 arch:x86

    49c5ff6514fe048918a47d3f7b336d1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qqqngcngr/FireQQ堂外挂/Fire QQ堂4.2外挂/脚本/高仿技术穿泡脚本.ini
  • qqqngcngr/FireQQ堂外挂/QQ堂4.2下载器.exe
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/SimpleFC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $_2_/Microsoft.VC80.ATL.manifest
    .xml
  • $_2_/Microsoft.VC80.CRT.manifest
  • $_2_/MiniQQDL.exe
    .exe windows:4 windows x86 arch:x86

    856996029e43a947f5dc780678aa3175


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/TenioDL/Microsoft.VC80.ATL.manifest
    .xml
  • $_2_/TenioDL/Microsoft.VC80.CRT.manifest
  • $_2_/TenioDL/TNProxy.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3e1312f81e1880a7089194f148e0d58e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/TenioDL/TenioDL.dll
    .dll windows:4 windows x86 arch:x86

    848268aaaa874f41af142042665fbcad


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/TenioDL/TenioDL.exe
    .exe windows:4 windows x86 arch:x86

    294f78c08023110b8c8f0c6fd8d0a462


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/TenioDL/TenioDL_core.dll
    .dll windows:4 windows x86 arch:x86

    d093b31c64f9f8f9f1f6d4b2fcb86fd6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/TenioDL/atl80.dll
    .dll windows:4 windows x86 arch:x86

    00c6e566e88c3d07ddc376fe4ce83c5f


    Headers

    Imports

    Exports

    Sections

  • $_2_/TenioDL/bugreport.exe
    .exe windows:4 windows x86 arch:x86

    45e000e3f6a6c1e554c3e4ea18b3b105


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/TenioDL/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • $_2_/TenioDL/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • $_2_/TenioDL/p2papi.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e4b3106f9d5a7c3dcb73cb3544e6f986


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/TenioDL/p2papp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    fd6b600c1e32da057225cefc248326e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/TenioDL/p2pcore.dll
    .dll windows:4 windows x86 arch:x86

    4ea11abb09cf5f2281ea47a9353acba6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/TenioDL/p2pdata.dll
    .dll windows:4 windows x86 arch:x86

    60ded821405f2f2d1f369264fc600e69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/TenioDL/p2phttp.dll
    .dll windows:4 windows x86 arch:x86

    ac6c8dbca03c2a301c07f4f789d7177c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/atl80.dll
    .dll windows:4 windows x86 arch:x86

    00c6e566e88c3d07ddc376fe4ce83c5f


    Headers

    Imports

    Exports

    Sections

  • $_2_/config.ini
  • $_2_/image/Thumbs.db
  • $_2_/image/button.png
    .png
  • $_2_/image/close.png
    .png
  • $_2_/image/loading.png
    .png
  • $_2_/image/mainbnd.png
    .png
  • $_2_/image/mainwnd.jpg
    .jpg
  • $_2_/image/min.png
    .png
  • $_2_/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • $_2_/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • $_2_/xzqdl.ico
  • qqqngcngr/FireQQ堂外挂/修复公告!.txt
  • qqqngcngr/QQ堂4.3全能外挂.exe
    .exe windows:4 windows x86 arch:x86

    3d3d967282b1619854edf6348ebd96b7


    Headers

    Imports

    Sections