df0417d432e2b114de5545fb34f4f7af_JaffaCakes118

resource	yara_rule
static1/unpack001/叮咚茶DLL函数查看器/ViewApi.exe	upx

resource
unpack001/叮咚茶DLL函数查看器/Plugin/v3test.dll
unpack001/叮咚茶DLL函数查看器/ViewApi.exe

SHA256 4791a765cb7ab2ee706c74ac0e0354ad82e19c4508e9ed70842f4fee3cf53481
MD5 df0417d432e2b114de5545fb34f4f7af
SHA1 8fb35e51d3235b71a86f5bf965bf28b3bc882773
SHA512 aaa451eb3d3e83c4ba6504a55f1bda07773bb3d639dd3b7f74fd58e4c114cd19e5ecb12bd5806b4f4633a86e9de3f0a8ddc4b9620662600bbefd5b7f502114cf
SSDEEP 24576:hBZq1S5I/+nshxQ5+NvR9G/5BH17g74fcmrzKm526nw:hBZO/+e/Rs/5Nm4fcyWmwWw
MD5 SHA1 SHA512 SSDEEP

使用说明.url

SHA256 46df9d8dad577577f3da4a6eefeb531616614f62fee20e9de3adbb088d0bfed7
MD5 59b9685cba5d2ac1b35f7eee4a17fa33
SHA1 68530715b329fedf68518267634094c35d51a9e9
SHA512 a7f8b6b5bf1978a95195f79bcf1acdb027a737edd70a338adef8a095703cf11c4370fd86c861e802db7d7bb751aee0aee1d58149d62044802ef987c4149719e0
MD5 SHA1 SHA512

叮咚茶DLL函数查看器/Plugin/Source/e/v3test.e

SHA256 3f7ac0f466983d4681c31bd6196a47e64fdb29745a1a3b8d99d2cbebf1b14c43
MD5 3520d9e2892fee8f58aa5150a1a885f4
SHA1 62cdc744d6dbd5bec773411b900c92dbb66ac473
SHA512 a6250be0ca1ab7b3a9b866038d2788f242d072a72c6b5d0b3e6c29d401be6f0ff32ecd3782ee7f904554fa2c3df52a1952af4e85769026ade9bc6f56d232c6d1
SSDEEP 192:NSCluZssMoHmhcSDA5soQjg0zzACPlFuibIyhSRHhUsq7uIo:oCQZsiH0cSwsoQjg0/ACPldh8hn4u
MD5 SHA1 SHA512 SSDEEP

叮咚茶DLL函数查看器/Plugin/v3test.dll

IMPHASH bd9b2189a40f2711f7dee0c8505466d1
SHA256 4f385e5da638d0a30eb80147470d9e2fb3917eb7c9a1f4269745bf10dcdf3606
MD5 c9084c3eeb370ffb9d12a0c72b9a1b24
SHA1 cfeaf4e5875f297a7655d6b4d9eadd0ea4f01f4a
SHA512 1d66025bc5eacb9a6cb0d1287112a496d63785dcd86c2b17350f5db3912fa7e2b906b995b8458746efea781e7a54ff247e7334ecb3a568ad1cd0d5bf8cba26ee
SSDEEP 6144:cpmyrJVl9uLqQZqQy80NF1swkhY5XPcRyZaxvn5GaZhWcx1San5eKN7le0+GLHuh:cpmeTvyqQZqHFGEZQvM21Sa23ZX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

286769

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GlobalUnlock SetStdHandle IsBadCodePtr IsBadReadPtr CompareStringW CompareStringA SetUnhandledExceptionFilter GetStringTypeW GetStringTypeA IsBadWritePtr VirtualAlloc FindClose LCMapStringA SetEnvironmentVariableA VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetStartupInfoA GetFileType GetStdHandle SetHandleCount GetACP HeapSize TerminateProcess GetLocalTime GetSystemTime GetTimeZoneInformation RaiseException RtlUnwind GetOEMCP GetCPInfo GetProcessVersion SetErrorMode GlobalFlags GetCurrentThread CreateSemaphoreA ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection GetProfileStringA WriteFile ReadFile GetLastError WaitForMultipleObjects CreateFileA SetEvent FindResourceA LoadResource LockResource GetModuleFileNameA GetCurrentThreadId ExitProcess GlobalSize GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA WinExec lstrcpyA FindNextFileA GlobalReAlloc HeapFree HeapReAlloc GetProcessHeap HeapAlloc GetFullPathNameA FreeLibrary LoadLibraryA lstrlenA GetVersionExA WritePrivateProfileStringA CreateThread CreateEventA Sleep GlobalAlloc FindFirstFileA GlobalLock GetFileTime GetFileSize TlsGetValue LocalReAlloc TlsSetValue TlsFree GlobalHandle TlsAlloc LocalAlloc lstrcmpA GetVersion GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpiA SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer GetCurrentProcess DuplicateHandle lstrcpynA SetLastError GetFileAttributesA SetCurrentDirectoryA FileTimeToLocalFileTime FileTimeToSystemTime LocalFree MultiByteToWideChar WideCharToMultiByte InterlockedDecrement InterlockedIncrement GetVolumeInformationA GetModuleHandleA GetProcAddress MulDiv GetCommandLineA GetTickCount WaitForSingleObject LCMapStringW CloseHandle

user32

OpenClipboard GetClipboardData CloseClipboard SetClipboardData EmptyClipboard wsprintfA GetSystemMetrics GetCursorPos MessageBoxA SetWindowPos SendMessageA DestroyCursor SetParent IsWindow PostMessageA GetTopWindow GetParent GetFocus GetClientRect InvalidateRect ValidateRect UpdateWindow EqualRect GetWindowRect SetForegroundWindow DestroyMenu IsChild ReleaseDC IsRectEmpty FillRect SystemParametersInfoA TranslateMessage LoadIconA DrawFrameControl DrawEdge DrawFocusRect WindowFromPoint GetMessageA DispatchMessageA SetRectEmpty RegisterClipboardFormatA CreateIconFromResourceEx CreateIconFromResource DrawIconEx CreatePopupMenu AppendMenuA ModifyMenuA CreateMenu CreateAcceleratorTableA ShowWindow IsWindowEnabled TranslateAcceleratorA CopyAcceleratorTableA PostQuitMessage IsZoomed GetClassInfoA DefWindowProcA GetDlgCtrlID GetSubMenu EnableMenuItem ClientToScreen EnumDisplaySettingsA LoadImageA GetKeyState GetMenu SetMenu PeekMessageA IsIconic SetFocus GetActiveWindow GetWindow DestroyAcceleratorTable SetWindowRgn GetMessagePos ScreenToClient ChildWindowFromPointEx CopyRect LoadBitmapA WinHelpA KillTimer SetTimer ReleaseCapture GetWindowTextA GetWindowTextLengthA CharUpperA GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA GetDlgItem DestroyWindow CreateDialogIndirectParamA EndDialog GetNextDlgTabItem GetWindowPlacement RegisterWindowMessageA GetDC GetLastActivePopup GetMessageTime RemovePropA CallWindowProcA GetPropA UnhookWindowsHookEx SetPropA GetClassLongA CallNextHookEx SetWindowsHookExA CreateWindowExA GetMenuItemID GetMenuItemCount RegisterClassA GetScrollPos GetForegroundWindow AdjustWindowRectEx MapWindowPoints SendDlgItemMessageA ScrollWindowEx IsDialogMessageA SetWindowTextA MoveWindow CheckMenuItem SetMenuItemBitmaps GetMenuState GetMenuCheckMarkDimensions GetClassNameA GetDesktopWindow UnregisterClassA LoadStringA GetSysColorBrush GetCapture SetCapture GetScrollRange SetScrollRange SetScrollPos InflateRect SetRect IntersectRect DestroyIcon PtInRect OffsetRect IsWindowVisible EnableWindow RedrawWindow GetWindowLongA SetWindowLongA GetSysColor SetActiveWindow SetCursorPos LoadCursorA SetCursor

gdi32

CreateRectRgnIndirect SetStretchBltMode GetClipRgn CreatePolygonRgn SelectClipRgn DeleteObject CreateDIBitmap GetSystemPaletteEntries CreatePalette StretchBlt SelectPalette RealizePalette GetDIBits BeginPath EndPath PathToRegion CreateEllipticRgn CreateRoundRectRgn GetWindowExtEx GetViewportOrgEx GetWindowOrgEx GetTextColor GetBkMode GetBkColor GetROP2 GetStretchBltMode GetPolyFillMode CreateCompatibleBitmap CreateDCA CreateBitmap SelectObject GetObjectA CreatePen PatBlt FillRgn CreateRectRgn CombineRgn CreateSolidBrush GetStockObject CreateFontIndirectA EndPage EndDoc DeleteDC StartDocA StartPage BitBlt CreateCompatibleDC Ellipse Rectangle LPtoDP DPtoLP GetCurrentObject RoundRect GetTextExtentPoint32A GetDeviceCaps SaveDC RestoreDC SetBkMode SetPolyFillMode SetROP2 SetTextColor GetTextMetricsA Escape ExtTextOutA TextOutA RectVisible PtVisible GetViewportExtEx ExtSelectClipRgn LineTo MoveToEx ExcludeClipRect GetClipBox ScaleWindowExtEx SetWindowExtEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetBkColor

winmm

waveOutReset midiStreamRestart midiStreamClose midiOutReset midiStreamStop midiStreamOut midiOutPrepareHeader midiStreamProperty midiStreamOpen midiOutUnprepareHeader waveOutOpen waveOutGetNumDevs waveOutClose waveOutUnprepareHeader waveOutPause waveOutWrite waveOutPrepareHeader

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegQueryValueA RegCloseKey RegOpenKeyExA RegSetValueExA RegCreateKeyExA

shell32

Shell_NotifyIconA ShellExecuteA

ole32

OleUninitialize CLSIDFromString OleInitialize

oleaut32

UnRegisterTypeLi RegisterTypeLi LoadTypeLi

comctl32

ImageList_Destroy ord17

ws2_32

ioctlsocket recv getpeername accept inet_ntoa WSACleanup closesocket WSAAsyncSelect recvfrom

comdlg32

GetFileTitleA GetSaveFileNameA GetOpenFileNameA ChooseColorA

叮咚茶DLL函数查看器/ReadMe.txt

SHA256 9faabf1825655cd90b6e90786233f6e1bb638040d141cea93f020efe29fa4ff0
MD5 2ed8786748f15683b51473eac4b9499f
SHA1 6df979850579497a3a82786b8f0f2b4c6ebbd2f9
SHA512 b52df98f27364fe627c5cae915ec82fe2f2b07fe0dac41179b5125965f7831a69cf84bf15f5a21ae69639e6bf95414073db8e387e6d3d0b157243a31e7364e83
SSDEEP 96:7JtzMi7mbkGcSTtx4Yzrw4KSiJId8RQNP7ZtlYorx:NtQjxx4YHJiRexTt
MD5 SHA1 SHA512 SSDEEP

叮咚茶DLL函数查看器/ViewApi.cfg

SHA256 2ae5c186c953e9c9ab6c061ac16b0ec8a5f148ec6e8d6de1cf5ab734bd005a2a
MD5 b2c95820767d93ce934ac6371d9dbb9e
SHA1 abe386737feb6dc849b8bcff64db10849f1824e7
SHA512 9b68a5fb044c73e35451992370d01d3c7e1f919a29127950853a831baffb1e08cc330689fd3a757b4b626450c02d24b474392d89b6015c8c0d1e79c5ccc87dd2
MD5 SHA1 SHA512

叮咚茶DLL函数查看器/ViewApi.exe

SHA256 c6d5858613d8335a410ef5656467b55738ad32c56713bbcf681d8b368f5707f8
MD5 d879b2e0f27eda654f26a904b9974c70
SHA1 001962b9316bf58623fdf269b1099c7d91820f6b
SHA512 434f30a6b8e2b63b96db871ffb79a79dc8144f1eebbd8e602a16b3d535894cce9b2d5610cc121e5d1df104220001ece72253ff71f87964fdaaedde8854653fcf
SSDEEP 12288:5uMoF1BiiBl9bVm2NG4zVE1cDSJIHN00S0rOc5JC/T9tinTt+oS:5uH3z30KVsmSOtPprRPCxi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1534416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

叮咚茶DLL函数查看器/userdb.txt

SHA256 ab3c8328ffdd13fbb978a4cef5f462e8e250d9cc8c0e50f1d72a352cb42e336a
MD5 1b7d5f864471258eaaa20469e7043170
SHA1 4e2e93c72cbaf586f40b351cccad8d5b01ccb309
SHA512 e78c4182ec9b98716c353558852d0d131005d8d628fdd16cc7e98ce146eac48ef0cc64605a16d2cf90bea00da116f08ab73ed60672b42d2b55ba3f40354b40a5
SSDEEP 6144:ZxHcW2+xqnwPghp5lTAGbIv/JhLGWTLT1bG48rPuhF12zlEL:9zqnwPobwJhLZL9qrPSF12zlEL
MD5 SHA1 SHA512 SSDEEP

叮咚茶DLL函数查看器/未命名1.jpg

SHA256 02c7704eb04aab853c01bb5a23a6611dfc5260961f9210188b4d6e46f63d8ff9
MD5 03b1c442c512f7850a48228b1068a554
SHA1 f2d75dd9e612ab281e2a3c541f2893a351bcc1db
SHA512 94d218c9af8a1a2e9299a462c27cc534a4f63c03be42cc29d33b553d25e28241212455b3398936882fa2844ec12d869d63d2b80c7c54470d275b408ec7df4e7f
SSDEEP 1536:UtcFHmbsPA1p5PJdh6PXGYSmw6Z3HRGZOoDGfGWtgwwWJ7q:jGcA1p5Ph6w6zMOoae2q
MD5 SHA1 SHA512 SSDEEP

叮咚茶DLL函数查看器/未命名3.jpg

SHA256 95bef837d004382bae7a53377db7079fe6be20a95364f051f907ada6f9d21619
MD5 d6c6a269bb2ba342d7ed63d6b57109b3
SHA1 c561b7df29b73930019c6b464a71ad894a4d6560
SHA512 1b9cf8c3f886d33ada876988697ec12fe79f61966ca0e229ccac1284d33d5bbcd7bb71560da0d45b68f569c9f3318317482c9b308cb48b10c880b872317b6b85
SSDEEP 1536:Lf5EDT9mXZ0CmquIWlmZVAXX2clBTsGsGsosGZwRJDvnTVRlCMkfz9rtLY29cStP:Lf5EDT9y+HqEmZV2twjDvTVRlCMIZRLT
MD5 SHA1 SHA512 SSDEEP

叮咚茶DLL函数查看器/未命名4.jpg

SHA256 be8418596e23ccb9679a9964c82c6de074cc68123cbe494c97734574ae8fa09f
MD5 4a4ad1382f31045bcf642579bf64027f
SHA1 3866314a9739ab5c02a44297c04c4ef61b1c4461
SHA512 64ccd9ae7fd5d20e64458778750b51bc1c74dfbdb06127fcda8bcbe17e55ef445c091e9f4550c075755e0de3082266b2cd8ca44b273a9452c4ce3b33a6f109b3
SSDEEP 1536:Tl9hIVp5xT8/hg5ApwPZUSbjXMe5cWQjux0y46/zK9CAV263kwDrLHOWQ/:TdIVp5l8pWEKM3WQ00q/zqCg263v3up/
MD5 SHA1 SHA512 SSDEEP

极速软件下载.url

SHA256 49c1ace06a959cf0600de6526917ad47efa7a69860c6372226e295ae451c10f8
MD5 48195bcd2fcc73d4ed844ff646587232
SHA1 0fc74b362d3dcdb639cd86a01e7c4e3c2c0fecc6
SHA512 28a341d90b11526a8ca30ac1221eb08f57ae00a9c7fab17043f390009ce8f0e4fb4b05040269aeffd6276d8fdf114cbec697997875d33dbc9776220aea490d0b
MD5 SHA1 SHA512