Overview

overview

7

Static

static

7

QQ空间�...32.dll

windows7-x64

3

QQ空间�...32.dll

windows10-2004-x64

3

QQ空间�...32.dll

windows7-x64

3

QQ空间�...32.dll

windows10-2004-x64

3

QQ空间�...TL.dll

windows7-x64

3

QQ空间�...TL.dll

windows10-2004-x64

3

QQ空间�...ET.dll

windows7-x64

3

QQ空间�...ET.dll

windows10-2004-x64

3

QQ空间�...CK.dll

windows7-x64

3

QQ空间�...CK.dll

windows10-2004-x64

3

QQ空间�....5.exe

windows7-x64

3

QQ空间�....5.exe

windows10-2004-x64

3

QQ空间�...��.bat

windows7-x64

3

QQ空间�...��.bat

windows10-2004-x64

3

使用说明.htm

windows7-x64

3

使用说明.htm

windows10-2004-x64

3

注册.url

windows7-x64

1

注册.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    53975006419b51d0726e90d315853643_JaffaCakes118

  • Size

    901KB

  • MD5

    53975006419b51d0726e90d315853643

  • SHA1

    3e2783558876a56b51d7ab04f9f028dde5d91085

  • SHA256

    9070b77bf7acae28441c7f06c2689f22e27831091a1b6b2b9fc76cd7cc737f48

  • SHA512

    e375b1b31ae26b9b025e01ef821203a21dd44dc26dbe58985a1ea9511d9224fda8aab4123a82e31e02b1cac8c8cf3e297b0376fa3f1694e352a34678bec49959

  • SSDEEP

    24576:XLBpURqqA6WgzMweSBP/dbQUNsbIDwsnPPObOg99dc:1pUPA6W4MXwXBlKbIUYPWbOK9dc

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 53975006419b51d0726e90d315853643_JaffaCakes118
    .rar
  • QQ空间全能助手2.5/COMCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    c8cebbf034d8c6304701e5ec3fae70a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ空间全能助手2.5/COMDLG32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ空间全能助手2.5/MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    2b2ee4e06ab7ae589a670cad99121b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ空间全能助手2.5/MSINET.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    96286284ff8e040938ba779778d1542e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ空间全能助手2.5/MSWINSCK.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    cb0275eec9ac31b6d4d44320e576fadb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ空间全能助手2.5/QQ空间全能助手2.5.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQ空间全能助手2.5/VISTA WIN7 用户不能运行点击.txt
  • QQ空间全能助手2.5/无法运行请点我.bat
  • QQ空间全能助手2.5/更新内容.txt
  • 使用说明.htm
    .html
  • 注册.url
    .url