550dd9ea439797a9e935c6507644b312_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
550dd9ea439797a9e935c6507644b312_JaffaCakes118
Size 2.3MB
Sample241018-c84b5avgrl
SHA256 90cbfcdad5ef720befce0a9662c06fe4fc5b1ac0353d828b0ca6684989165a24
MD5 550dd9ea439797a9e935c6507644b312
SHA1 0f487d3d776f5f8ab355fa9ee5a034301c47c347
SHA512 2ee36fdf6c5567dee75c627e8e6253c8380050ea18853224a4c1cf747d8e47204bb62d3ab5ac38002ab0a3f6b2c6ce4a1cee2e699f1eb7cdd38ab49ad2d4b926
SSDEEP 49152:LBE+X3MeIsK0p3vKV76ZisvdN2vrTsPaoKZapOLYJ0IT+ESyyAp:1E+hOyfKV76Z7dkTm38i0ITnFp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QQ绿钻免费领取/录象.exe

File Explorer

550dd9ea439797a9e935c6507644b312_JaffaCakes118

.rar 2.3MB
QQ绿钻免费领取/作品发布指南.txt

1KB
QQ绿钻免费领取/免责声明.txt

573B
QQ绿钻免费领取/免费领取QQ绿砖.txt

868B
QQ绿钻免费领取/录象.exe

.exe 14.8MB
QQ绿钻免费领取/检查更新.url

.url 273B
QQ绿钻免费领取/注册机.reg

139B

550dd9ea439797a9e935c6507644b312_JaffaCakes118

SHA256 90cbfcdad5ef720befce0a9662c06fe4fc5b1ac0353d828b0ca6684989165a24
MD5 550dd9ea439797a9e935c6507644b312
SHA1 0f487d3d776f5f8ab355fa9ee5a034301c47c347
SHA512 2ee36fdf6c5567dee75c627e8e6253c8380050ea18853224a4c1cf747d8e47204bb62d3ab5ac38002ab0a3f6b2c6ce4a1cee2e699f1eb7cdd38ab49ad2d4b926
SSDEEP 49152:LBE+X3MeIsK0p3vKV76ZisvdN2vrTsPaoKZapOLYJ0IT+ESyyAp:1E+hOyfKV76Z7dkTm38i0ITnFp
MD5 SHA1 SHA512 SSDEEP

QQ绿钻免费领取/录象.exe

IMPHASH 4cf0cc4f82a4f66abcab103ac61ef685
SHA256 5842dd5495905368d2365dd01d6e5cd223d967ac30de3db041402ca1d507f8a3
MD5 3d3246231b324fc699ea98d8164ec711
SHA1 133e0d6cdde4d68ac082cecea1ed078e7636571b
SHA512 441043eedcc987c0f509523411acb46025a7d496bf6485e0c82cae088ab59deea8df5b6023e9217fc7f3d8bf824e3dcbe2d691da9ac07188c9c44f5a267627a2
SSDEEP 12288:AEvLlry0ZFNegbJJvSFmn+MuZgPSFquOHKTzUAEeSrH9LxVvi1ch:/lrrNZDPcqmzU+SrdLxVvi1q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCloseKey RegOpenKeyExA RegQueryValueExA

kernel32

CloseHandle CompareStringA CreateEventA CreateFileA CreateThread DeleteCriticalSection DeleteFileA EnterCriticalSection EnumCalendarInfoA ExitProcess ExitThread FindClose FindFirstFileA FindResourceA FormatMessageA FreeLibrary FreeResource GetACP GetCPInfo GetCommandLineA GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceA GetEnvironmentStrings GetExitCodeThread GetFileAttributesA GetFileSize GetFileType GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeW GetSystemInfo GetThreadLocale GetTickCount GetVersion GetVersionExA GlobalAddAtomA GlobalAlloc GlobalDeleteAtom GlobalFree GlobalHandle GlobalLock GlobalReAlloc GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedIncrement LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadResource LocalAlloc LocalFree LockResource MulDiv MultiByteToWideChar OpenEventA RaiseException ReadFile ResetEvent RtlUnwind SetConsoleCtrlHandler SetEndOfFile SetErrorMode SetEvent SetFilePointer SetHandleCount SetLastError SetThreadLocale SetThreadPriority SizeofResource Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpA lstrcpyA lstrcpynA lstrlenA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

comctl32

ImageList_Add ImageList_BeginDrag ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIconSize ImageList_GetImageCount ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetDragCursorImage ImageList_SetIconSize ImageList_Write ord17 ImageList_DrawEx

gdi32

BitBlt CombineRgn CopyEnhMetaFileA CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateDIBitmap CreateFontIndirectA CreateHalftonePalette CreatePalette CreatePenIndirect CreateRectRgn CreateSolidBrush DeleteDC DeleteEnhMetaFile DeleteObject Ellipse ExcludeClipRect ExtTextOutA GdiFlush GetBitmapBits GetBrushOrgEx GetClipBox GetCurrentPositionEx GetDCOrgEx GetDIBColorTable GetDIBits GetDeviceCaps GetEnhMetaFileBits GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetObjectA GetPaletteEntries GetPixel GetRgnBox GetStockObject GetStretchBltMode GetSystemPaletteEntries GetTextExtentPoint32A GetTextExtentPointA GetTextMetricsA GetWinMetaFileBits GetWindowOrgEx IntersectClipRect LineTo MaskBlt MoveToEx PatBlt PlayEnhMetaFile Polyline RealizePalette RectVisible Rectangle RestoreDC SaveDC SelectObject SelectPalette SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetEnhMetaFileBits SetPixel SetROP2 SetStretchBltMode SetTextColor SetViewportOrgEx SetWinMetaFileBits SetWindowOrgEx StretchBlt UnrealizeObject

msacm32

acmDriverClose acmDriverDetailsA acmDriverEnum acmDriverOpen acmFormatDetailsA acmFormatEnumA acmFormatTagDetailsA acmMetrics acmStreamClose acmStreamConvert acmStreamOpen acmStreamPrepareHeader acmStreamSize acmStreamUnprepareHeader

user32

ActivateKeyboardLayout AdjustWindowRectEx BeginPaint CallNextHookEx CallWindowProcA CharLowerA CharLowerBuffA CharNextA CheckMenuItem ClientToScreen CreateIcon CreateMenu CreatePopupMenu CreateWindowExA DefFrameProcA DefMDIChildProcA DefWindowProcA DeleteMenu DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DrawEdge DrawFrameControl DrawIcon DrawIconEx DrawMenuBar DrawTextA EnableMenuItem EnableScrollBar EnableWindow EndPaint EnumThreadWindows EnumWindows EqualRect FillRect FindWindowA FrameRect GetActiveWindow GetCapture GetClassInfoA GetClientRect GetClipboardData GetCursor GetCursorPos GetDC GetDCEx GetDesktopWindow GetFocus GetForegroundWindow GetIconInfo GetKeyNameTextA GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardState GetKeyboardType GetLastActivePopup GetMenu GetMenuItemCount GetMenuItemID GetMenuItemInfoA GetMenuState GetMenuStringA GetParent GetPropA GetScrollInfo GetScrollPos GetScrollRange GetSubMenu GetSysColor GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongA GetWindowPlacement GetWindowRect GetWindowTextA GetWindowThreadProcessId InflateRect InsertMenuA InsertMenuItemA IntersectRect InvalidateRect IsChild IsDialogMessageA IsIconic IsRectEmpty IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadBitmapA LoadCursorA LoadIconA LoadKeyboardLayoutA LoadStringA MapVirtualKeyA MapWindowPoints MessageBoxA MsgWaitForMultipleObjects OemToCharA OffsetRect PeekMessageA PostMessageA PostQuitMessage PtInRect RedrawWindow RegisterClassA RegisterClipboardFormatA RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu RemovePropA ScreenToClient ScrollWindow SendMessageA SetActiveWindow SetCapture SetClassLongA SetCursor SetFocus SetForegroundWindow SetMenu SetMenuItemInfoA SetPropA SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongA SetWindowPlacement SetWindowPos SetWindowTextA SetWindowsHookExA ShowCursor ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoA TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnregisterClassA UpdateWindow WaitMessage WinHelpA WindowFromPoint wsprintfA GetSystemMenu

winmm

timeBeginPeriod timeEndPeriod timeGetDevCaps timeKillEvent timeSetEvent waveOutClose waveOutOpen waveOutPrepareHeader waveOutReset waveOutUnprepareHeader waveOutWrite

ole32

IsEqualGUID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen SysStringLen VariantChangeTypeEx VariantClear VariantCopyInd

Name

.text

Size

521KB

Virtual Size

524KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

38KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

10KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

33KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

30KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

550dd9ea439797a9e935c6507644b312_JaffaCakes118

QQ绿钻免费领取/作品发布指南.txt

QQ绿钻免费领取/免责声明.txt

QQ绿钻免费领取/免费领取QQ绿砖.txt

QQ绿钻免费领取/录象.exe

advapi32

kernel32

version

comctl32

gdi32

msacm32

user32

winmm

ole32

oleaut32

generic

QQ绿钻免费领取/检查更新.url

QQ绿钻免费领取/注册机.reg