General

  • Target

    2a743e476e236f6a5c6c1da3426eced5_JaffaCakes118

  • Size

    362KB

  • MD5

    2a743e476e236f6a5c6c1da3426eced5

  • SHA1

    8ebb23f08440f0633eb8ae4df648333de52921ad

  • SHA256

    a29a7f10e5ddacefc55c3261181db302d6f0c6b5ad3d156a02eed42a8f3abff6

  • SHA512

    aa2534ed118f98338ffacf4bc3c6ebf24b012ac0ea333310800092b32b07253cd569f1001d00684fe0f0ccbc07db8c1320a027976d0bfb966ecb26f5d60ba745

  • SSDEEP

    6144:HLLKzdNIF1wObwGnd4EkvEeCq9+4fspn3j6qVvXJALmb84t3d1jsNzVCNgbyoRND:H3DmO85ZwqI40pn3j6qh2abRd1ezVQ/E

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a743e476e236f6a5c6c1da3426eced5_JaffaCakes118
    .rar
  • 易步QQ游戏大厅多开器v5.1/Skin.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 易步QQ游戏大厅多开器v5.1/ebubox.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 易步QQ游戏大厅多开器v5.1/skin.she
  • 易步QQ游戏大厅多开器v5.1/ut.ebubox
    .dll windows:5 windows x86 arch:x86

    2a736242f5dce0340ee126ce20dbfd6a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 易步QQ游戏大厅多开器v5.1/使用说明.txt
  • 易步QQ游戏大厅多开器v5.1/易步QQ游戏大厅多开器.exe
    .exe windows:4 windows x86 arch:x86

    7388bbc9d088c3879a226fc759050443


    Headers

    Imports

    Sections