69332691d979cbce7cf978df67635551_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

69332691d979cbce7cf978df67635551_JaffaCakes118
Size

863KB
MD5

69332691d979cbce7cf978df67635551
SHA1

15e9990ad9cc3da899695f43f3c7fbaf9b64c117
SHA256

c829599c36ebff5216876a8c446238b8057bac1556c6d0f510c06ce80cebe7c6
SHA512

98b48e926e71db9640a5741bc6cbfb5a1fdc8817c02c3522f585917ce07176075ea92c1d30749eccd75bb2eb0c7f1b8afa728515f67a1a62d44bc47c48942657
SSDEEP

24576:mnru0s8o8TwSImjbe4JX8UI1lVSShsE+DI8PpJ:mru008TLB3e4J0rVVsE18Pb

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WJXSmartFocus300/WJXHook.dll
unpack001/WJXSmartFocus300/WJXSmartFocus.exe

Files

69332691d979cbce7cf978df67635551_JaffaCakes118
.zip
WJXSmartFocus300/GameData/1.dat
WJXSmartFocus300/GameData/2.dat
WJXSmartFocus300/GameData/23.dat
WJXSmartFocus300/GameData/24.dat
WJXSmartFocus300/GameData/25.dat
WJXSmartFocus300/GameData/26.dat
WJXSmartFocus300/GameData/27.dat
WJXSmartFocus300/GameData/28.dat
WJXSmartFocus300/GameData/29.dat
WJXSmartFocus300/GameData/3.dat
WJXSmartFocus300/GameData/4.dat
WJXSmartFocus300/GameData/5.dat
WJXSmartFocus300/GameData/6.dat
WJXSmartFocus300/GameData/7.dat
WJXSmartFocus300/GameData/8.dat
WJXSmartFocus300/GameData/script.lua
WJXSmartFocus300/GameData/servers.ini
WJXSmartFocus300/GameData/transmit.dat
WJXSmartFocus300/Scripts/Chuyen map giu gio choi.lua
WJXSmartFocus300/Scripts/Kich hoat plugins.lua
WJXSmartFocus300/Scripts/Vao chien truong.lua
WJXSmartFocus300/Scripts/Vi du script.lua
WJXSmartFocus300/UserData/ExtraConfig.ini
WJXSmartFocus300/UserData/SmartFocus.ini
WJXSmartFocus300/WJXHook.dll
.dll windows:5 windows x86 arch:x86

a5e3d6b5153b089e97fbd11429ecc19a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

RegisterWindowMessageA

Exports

Exports

EjectDll
GetId
InjectDll

Sections

.text
Size: 59KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WJXSmartFocus300/WJXSmartFocus.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mackt
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a5e3d6b5153b089e97fbd11429ecc19a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 59KB - Virtual size: 168KB

.rsrc Size: 4KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 512B

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.6MB - Virtual size: 1.7MB

.rsrc Size: 9KB - Virtual size: 16KB

.mackt Size: 13KB - Virtual size: 16KB

.text
Size: 59KB - Virtual size: 168KB

.rsrc
Size: 4KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 512B

.text
Size: 1.6MB - Virtual size: 1.7MB

.rsrc
Size: 9KB - Virtual size: 16KB

.mackt
Size: 13KB - Virtual size: 16KB