General

  • Target

    3ebacd2e46c6762c514067a56568a40e_JaffaCakes118

  • Size

    17.8MB

  • MD5

    3ebacd2e46c6762c514067a56568a40e

  • SHA1

    b72338879f235abcc9e6e790c07ed336e766399d

  • SHA256

    055ad3c502b89f3d17e624b0038fc86eb77530d438addfd9a7ea4933614d9951

  • SHA512

    a7c8979b8ac7654442ed271fb7ca4ff104804edc019de2c4ef43cd741ebeeffc7c8c564b6a29670348a7801c06ca761ea907c3610f8befa7fd509b468a344ca1

  • SSDEEP

    393216:wWEyK5at23Rj0QMS2YHESJ1alvdUqQYAktXorT9E1E+22DkBhv8:XpUaI3Ro+2iESJ1idsYltsw22DwhE

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ebacd2e46c6762c514067a56568a40e_JaffaCakes118
    .rar
  • ycQQ2011ad/Bin/AFCtrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    19a969e067d53c204cc9410f4e006581


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/AFUtil.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b4bcd86b1689567ed242b464ecdce30e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/AppCom.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a30d3ea63c46a14a8019727f11a96615


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/AppFramework.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    cf4558a1a677885365b19e42fa4cf240


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/AppMisc.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    59c54350ddf00a6f10f07b509fe912a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/AppUtil.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d9832379507b7b7e8ff9bf8170eda663


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/CWUB2.IP
  • ycQQ2011ad/Bin/CWUB2.ini
  • ycQQ2011ad/Bin/Camera.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    12d32e65db7682873539dc3905bdc7ba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/ChatFrameApp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    91234a76c3847fd2a04181c2974ffa30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/Common.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2fc8c487f94e05ce045cafffdee1bdce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/ConfigCenter.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    24f81415525805f2b390bf630597251b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/ContactInfoFrame.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8c7a94898558c30068fa7e63319b3af8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/ContactMgr.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6c78abc115da550f1cfef8da030d306e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/CustomFace.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0bbce2a216881ff32f1931e9a6447c33


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/FlashService.dll
    .dll windows:4 windows x86 arch:x86

    d7d54a8f519e804ec3850f0925b4f479


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/GF.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    346c54aa91b4025d0d38f348f4e9910c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/GroupApp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    262e624623842eb12d24246777e37faa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/IM.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    185c8d9074aa589c34591002bffaeb8f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/IPC.dll
    .dll windows:4 windows x86 arch:x86

    ed0db09f444840b331ad4697c17a4ba0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/InformationBox.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e3563a127e8b57bac68fe275eeb4925a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/KernelMisc.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8b07f9aa0b537a8c9d4a342f50ecc9d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/KernelUtil.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    07baae4916213ced1ba5ff886ca94b5b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/LoginPanel.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3ba890899cba6361d1d1ca45d8fe7c2c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/LongCnn.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    62ad8065a11c733bea781bceb04cee95


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/MainFrame.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5e18e73d29dbff60337f98bd9c8443b1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/MsgMgr.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    dc34464494bf2bbe64ec48459a8f8351


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/ProcessSession.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    557e50c31a79001b4839ba3a71bcdca7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/QQ.exe
    .exe windows:4 windows x86 arch:x86

    ddcea1715f5d96758ca63736a8dc1354


    Code Sign

    Headers

    Imports

    Sections

  • ycQQ2011ad/Bin/RHComm.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2ce61a76238a23645ee9994a58166a52


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/RICHED20.DLL
    .dll windows:4 windows x86 arch:x86

    19ebd6cf4c9e495eb30559a0feaea718


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/SCCore.dll
    .dll windows:4 windows x86 arch:x86

    eeb751c85e9f92ed8c4672ff1fd30d19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/SSOAxCtrlForPTLogin.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ae1372d0515f740003e5fc7393a5e36d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/SSOCommon.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    10a44f4ccbe1052177c8f4aa4c77e081


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/SSOPlatform.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f3ad42b23a5744ca18c481ea97869a09


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/SkinMgr.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0806ea5541cd294a6af14cc80f0a5af1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/StorageTool.exe
    .exe windows:4 windows x86 arch:x86

    2ce5dc4aad8e95e838c1173bec681f62


    Code Sign

    Headers

    Imports

    Sections

  • ycQQ2011ad/Bin/SystemMsg.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    acef124c7905f54be81b8e35c56606f8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/TSSafeEdit.dat
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ycQQ2011ad/Bin/TXFTNActiveX.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    490cc22d367dad64623924eb04641a26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/TaskTray.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    263c474fac9713729e1a541fe1b496fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/jgIOStub.dll
    .dll windows:4 windows x86 arch:x86

    68a0e0c95bf35c5abe6202c4e446af30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/jgImage.dll
    .dll windows:4 windows x86 arch:x86

    67246fc3bf871f11acde805579df1daf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/libexpat.dll
    .dll windows:4 windows x86 arch:x86

    000e7416bde1d6f083e2d66405b37109


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/libexpatw.dll
    .dll windows:4 windows x86 arch:x86

    000e7416bde1d6f083e2d66405b37109


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/libjpegturbo.dll
    .dll windows:4 windows x86 arch:x86

    b318b17baa05fac2c90a5c0880ec45c7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/libpng.dll
    .dll windows:4 windows x86 arch:x86

    5b18de3c4a245c1f49a3e29148adf38c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/msimg32.dll
    .dll windows:5 windows x86 arch:x86

    104f34d95d26e3f5c4298a96a8d9e092


    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/vi.dat
  • ycQQ2011ad/Bin/xGraphic32.dll
    .dll windows:4 windows x86 arch:x86

    e439dd84f314c8a86769826f294547d0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/xImage.dll
    .dll windows:4 windows x86 arch:x86

    f66a8de04feb2804ebdc0f9a7e0cce08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/Bin/zlib.dll
    .dll windows:4 windows x86 arch:x86

    962a4aa4b13b8b9e119492191014e772


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ycQQ2011ad/I18N/2052/AFPreLoadStringBundle.xml
    .xml
  • ycQQ2011ad/I18N/2052/AFStringBundle.xml
    .xml
  • ycQQ2011ad/I18N/2052/BaseStringBundle.xml
  • ycQQ2011ad/I18N/2052/BaseUrlBundle.xml.enc
  • ycQQ2011ad/I18N/2052/CommonString.xml
    .xml
  • ycQQ2011ad/I18N/2052/CustomFaceShortcut.xml
    .xml
  • ycQQ2011ad/I18N/2052/DGM.dat
    .zip
  • index.css
  • index.html
    .html
  • index.js
    .js
  • jquery.js
    .js
  • laba.gif
    .gif
  • ycQQ2011ad/I18N/2052/FontList.xml
    .xml
  • ycQQ2011ad/I18N/2052/GFStringBundle.xml
    .xml
  • ycQQ2011ad/I18N/2052/GroupLayer.xml
    .xml
  • ycQQ2011ad/I18N/2052/LangList.xml
    .xml
  • ycQQ2011ad/I18N/2052/LocList.xml
  • ycQQ2011ad/I18N/2052/PGFStringBundle.xml
    .xml
  • ycQQ2011ad/I18N/2052/PreLoadStringBundle.xml
    .xml
  • ycQQ2011ad/I18N/2052/StringBundle.xml
  • ycQQ2011ad/I18N/2052/UrlBundle.xml.enc
  • ycQQ2011ad/I18N/2052/groupsearch.dat
    .zip
  • alert1.html
    .js
  • images/cancelClick.png
    .png
  • images/cancelHover.png
    .png
  • images/cancelNormal.png
    .png
  • images/h_loading.jpg
    .jpg
  • images/head_blur.png
    .png
  • images/head_focus.png
    .png
  • images/level_0.png
    .png
  • images/level_1.png
    .png
  • images/level_2.png
    .png
  • images/level_3.png
    .png
  • images/level_4.png
    .png
  • images/level_5.png
    .png
  • images/level_6.png
    .png
  • images/level_7.png
    .png
  • images/loading.gif
    .gif
  • images/result_icon.png
    .png
  • images/result_line.png
    .png
  • images/scrollbar.png
    .png
  • images/submitClick.png
    .png
  • images/submitHover.png
    .png
  • images/submitNormal.png
    .png
  • index.html
    .js
  • scripts/classid.js
    .js
  • scripts/jquery.js
    .js
  • styles/groupSearch.css
  • v12.dat
    .html
  • ycQQ2011ad/I18N/2052/tradelist.dat
  • ycQQ2011ad/I18N/config.xml
    .xml
  • ycQQ2011ad/Misc/CSC/2052/1/3
  • ycQQ2011ad/Misc/CSC/2052/1/5
  • ycQQ2011ad/Misc/CSC/2052/1/7
  • ycQQ2011ad/Misc/CSC/2052/10/1
  • ycQQ2011ad/Misc/CSC/2052/11/1
  • ycQQ2011ad/Misc/CSC/2052/2/1
  • ycQQ2011ad/Misc/CSC/2052/3/1
  • ycQQ2011ad/Misc/CSC/2052/4/1
  • ycQQ2011ad/Misc/CSC/2052/5/1
  • ycQQ2011ad/Misc/CSC/2052/5/2
  • ycQQ2011ad/Misc/CSC/2052/7/1
  • ycQQ2011ad/Misc/CSC/2052/7/10
  • ycQQ2011ad/Misc/CSC/2052/7/11
  • ycQQ2011ad/Misc/CSC/2052/7/13
  • ycQQ2011ad/Misc/CSC/2052/7/14
  • ycQQ2011ad/Misc/CSC/2052/7/15
  • ycQQ2011ad/Misc/CSC/2052/7/16
  • ycQQ2011ad/Misc/CSC/2052/7/17
  • ycQQ2011ad/Misc/CSC/2052/7/18
  • ycQQ2011ad/Misc/CSC/2052/7/2
  • ycQQ2011ad/Misc/CSC/2052/7/3
  • ycQQ2011ad/Misc/CSC/2052/7/5
  • ycQQ2011ad/Misc/CSC/2052/7/6
  • ycQQ2011ad/Misc/CSC/2052/8/1
  • ycQQ2011ad/Misc/CSC/2052/8/3
  • ycQQ2011ad/Misc/CSC/2052/8/4
  • ycQQ2011ad/Misc/CSC/2052/8/5
  • ycQQ2011ad/Misc/CSC/2052/8/6
  • ycQQ2011ad/Misc/CSC/2052/9/1
  • ycQQ2011ad/Misc/CSC/2052/9/12
  • ycQQ2011ad/Misc/CSC/2052/9/3
  • ycQQ2011ad/Misc/CSC/2052/9/4
  • ycQQ2011ad/Misc/CSC/2052/9/5
  • ycQQ2011ad/Misc/CSC/2052/9/6
  • ycQQ2011ad/Misc/CSC/2052/9/7
  • ycQQ2011ad/Misc/CSC/2052/9/8
  • ycQQ2011ad/Misc/CSC/2052/9/9
  • ycQQ2011ad/Misc/LNNEsc/defaultTips/Tips_I_back2.bmp
  • ycQQ2011ad/Misc/LNNEsc/defaultTips/tips.html
  • ycQQ2011ad/Misc/LoginPanel/All_window_sizeGripFile.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/LoginPanel_window_windowBkg.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/LogoFile/2052/Logining.gif
    .gif
  • ycQQ2011ad/Misc/LoginPanel/LogoFile/2052/Logining_Vip.gif
    .gif
  • ycQQ2011ad/Misc/LoginPanel/Main_Title.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/btn_close_disable.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/btn_close_down.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/btn_close_highlight.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/btn_close_normal.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/btn_max_down.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/btn_max_highlight.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/btn_max_normal.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/btn_mini_down.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/btn_mini_highlight.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/btn_mini_normal.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/btn_restore_down.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/btn_restore_highlight.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/btn_restore_normal.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/login_btn_down.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/login_btn_focus.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/login_btn_highlight.png
    .png
  • ycQQ2011ad/Misc/LoginPanel/login_btn_normal.png
    .png
  • ycQQ2011ad/Misc/Sound/Classic/Audio.wav
  • ycQQ2011ad/Misc/Sound/Classic/Global.wav
  • ycQQ2011ad/Misc/Sound/Classic/msg.wav
  • ycQQ2011ad/Misc/Sound/Classic/shake.wav
  • ycQQ2011ad/Misc/Sound/Classic/system.wav
  • ycQQ2011ad/Misc/Sound/Classic/tweet.wav
  • ycQQ2011ad/Plugin/pluginList.db
  • ycQQ2011ad/Resource.1.71.5064/Data.rdb
  • ycQQ2011ad/Resource.1.71.5064/Res.rdb
  • ycQQ2011ad/Resource.1.71.5064/Themes/Default.rdb
  • ycQQ2011ad/Resource.1.71.5064/Xtml.rdb
  • ycQQ2011ad/af.xml.txd
  • ycQQ2011ad/app.xml.txd
  • ycQQ2011ad/common.xml.txd
  • ycQQ2011ad/gf-config-postlogin.xml
    .xml
  • ycQQ2011ad/gf-config.xml
    .xml
  • ycQQ2011ad/kernel.xml.txd
  • ycQQ2011ad/platform.tpc
    .xml
  • ycQQ2011ad/卸载.bat
  • ycQQ2011ad/河源下载站-cngr.cn.url
    .url
  • ycQQ2011ad/淘宝热卖.url
    .url
  • ycQQ2011ad/绿化.bat
    .bat .vbs