���@���3�����~7��jIX��_�d����P���"�i�D��S�Mg *��xYc�.��0��k s+<�M����}�Pl�]�s����h$�\�}�4x�U`*�)����t��%f M@?���\0���p��qL68��9�˺_H�Z4b�{1�(�Q���y��؟qso�$��9��M֝"z�P"��b�q���s^Y����)_�BX����o�ik��C:�C(#�tw��40��d�?J姆�T�X}�3HQ��i�����K��ib=�8�E�ñ�prn�;c�bh�����(9M��KUr��ŇERW�_(��i�����FRDޭ���@��Mx��)ZkL6�r�c��{�VZq[�>��9ũa����u[ |$-��n�] �5�F�����d �Kǁa��k��Q;���\�>?�����Փ�j�b�2 �#ŧ�Xɱy��}�K����猵�H'��LH%a��]*x�d�=U�SXrC����D���\�u�SZ��=��� $boJ ]�!̼����CK�>bY?�n0���`lH�|��BX���V=I5����W[[����k#Cil(���l���Cm�P�H��$������n(������x'�IJ�1��Z�#&���&j��hf-53�ozH��,���&:��uƛlP�G�39@Z;�P���2Jq�V���XP��d��n���]��;��l�^�-�2_WB�ý�r:��ҫon~n�y|�Ӕ��O@TT��a���X#^>�����&B�1�M���|�b7�:^�j ii�C���� vz�7k���$�C�do�;�^{���&�P~1�r�Ѱ�Րh�r(�t���q��"�>��.���"����%K�z�=NR֦�9�9n���-C�xt)R.N9H��-o�ʠz����*đ0ڦ�nMޗϥY��UO_���]On�5�F�����&b�t�:�w��3�Y^P��ti��ҟ�l.���l��Z�V��( �rȟ�0��������h�#Nԇ����_4���i�oL"v�[�����=8�x��ằ/��v��*��o� ���l��o1��V���b�Lzgƽ=�T��d�V@`��,�'��(�-j��v�Z̼0ޡ�r��pUA-�^ă�b���*�S@#Lh� )g���ƌ�����?�?�'ֲ ���ǒ����'��8`9�$e���.�c�yfg�s�_L��'����bo{A �K!��z5��������S����<�0yp�&?�L��E���r����&�����(����83��j+�=D�@���8 � ��&i�v�m�N�d���7��P:bL�-������C��G\�;O�O���g�4Gg��ˋS_��z��5q���a0X��H�q"�(�̲�4�k�-���KR�X�ӛ���_��3�z�-����H��{�8������@?��?Su��i��%#?�Do��N�`u�3�d.�*�Q/��j%[�8U�ɲ%b�v�kՒ���݄џ���{^\��5N��k�H4?G�yY.���N�����P8�D���?�W�͎�4�q���i�M~�����cHi+-�(jO3��qE�!T95��J#��1�@E�(iT��� q#��"�D�>��*��=xTY��'��5��G����2a����[p�4���~XN�>�@���:�IО-�0_<4nց�$&�8[z��� ��M�oL�;� �X���<crk���<�����>����V$�`L����[臅M[�����E�^�����+�wDz�\�;^�ޮ��1(/�6����`�g��ƞ03w��ȗ������i>"�s]Y,�r«�����H��/���?�3�h�?6�b��[�߅�����Ϛ��1&;[�J\����Cճ�̀`r*���a؝Jᷤ��o����\�{�{���{&Ո�����Ʌ������@4ց�1��D���o�_�L�,��g���k���"����;��v�ѿ�L�.�'�\aYQ��W5=�{���w��>��}�w���hx�H0����e.W� �P����&y��;�94�s��d�Y����p1Al������^k������ӹS!����mD��/��a��������o*�^5rJm��w��S��j!�ɛ�"��]��)�D��6 ��o�n5�4�{����"2����<x���l�>���>��S �%Vyl����������߬+�ޣq�#��p�B$6L&�]����� �֒)A<qU~�YXe��T/�)�w�/1+���u��l����qT H���f���k6zԕ�mF�Ҳd����#�����6|��PΊꈄ��j|}�X�����an��E���~�8]��:�j�%���i�T�f��\������ {�vq������ܾ��{�UT���M�S�����R�!ZP�6)6��N�x�i����^��㫸�;F�W��4>����M�=H�=�|�|���]8\Ƣ��]S�!�)v��]��MM��� J՚ݐnI�]��.犏�����ֿ{�!U���NL�v�Y䌹��Q6�]��[���▔�Gn�"{9�\�4�����ܳ2vzAbłqlOV����� �<��u�z=��f��O5��J<&4�"h"��R]5��aO��ߺ�7Z��W��sFݶ��Ǫ��n�,#��9� ��=Iu_�M(�i��y4S��_5)�J�X��vz�R>�d|7�qq�8��C���e}w|Ye?|m**�ְ��!��&l�ǎ�?LCf& tŮ�jd�U�F��r\)ˢ6�# J�vI.a[) � ���,]l�`�rЗ�g���z�S'q�d0"�|g�4���ޭXI��$���\L�9+?���d�YYt^rΖs��pS���b�|�A��¬�h���w-�ɲc-�ݝJc��>eV__�eސ�sN�E��h0�>�{{8G����"��*��ʅV�_/��fj����ُ<��/����BV$���"�����^�p�������P�N���Img�᫅���zru�B�G����g���#9��Q�����[vh��?RL+Q�
Overview
overview
6Static
static
3《热血�...NG.exe
windows7-x64
5《热血�...NG.exe
windows10-2004-x64
6《热血�...��.url
windows7-x64
3《热血�...��.url
windows10-2004-x64
3《热血�...��.url
windows7-x64
3《热血�...��.url
windows10-2004-x64
3《热血�...��.url
windows7-x64
3《热血�...��.url
windows10-2004-x64
3《热血�...��.url
windows7-x64
3《热血�...��.url
windows10-2004-x64
3《热血�...��.url
windows7-x64
3《热血�...��.url
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/SleepD+1TR-LNG.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/SleepD+1TR-LNG.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/单机游戏下载.url
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/单机游戏下载.url
Resource
win10v2004-20240910-en
Behavioral task
behavioral5
Sample
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/游戏工具大全.url
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/游戏工具大全.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/游戏攻略大全.url
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/游戏攻略大全.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/游戏秘籍大全.url
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/游戏秘籍大全.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/游戏补丁大全.url
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/游戏补丁大全.url
Resource
win10v2004-20240802-en
General
-
Target
16a4dbd943b7915be9986c2b6ec822ff_JaffaCakes118
-
Size
2.1MB
-
MD5
16a4dbd943b7915be9986c2b6ec822ff
-
SHA1
e82a246212cede1ab31975ab208407c8cd150b69
-
SHA256
9439d94a598b13efe20d877416f9e305a3c2345a030da4868cf183226a2b85d7
-
SHA512
3253c4a4238287aabb7a6096065fd28f2060be0576345adf9937bf93ebccbf921d390d63caf521a30ce80fae4b30b939e4c0d29b11134a48bb390f59f88b55c2
-
SSDEEP
49152:RQGicu9T77THjtvYJebWcX56lF/wo4C6Jbsrgn6kDal:RQGaT/TDmCXwltnb62Mnj2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/SleepD+1TR-LNG.exe
Files
-
16a4dbd943b7915be9986c2b6ec822ff_JaffaCakes118.rar
-
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/SleepD+1TR-LNG - I.N.F.O.txt
-
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/SleepD+1TR-LNG.exe.exe windows:4 windows x86 arch:x86
10ce3a556244417962a0f3fd1649be25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaAryLock
kernel32
HeapCreate
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
winmm
waveOutWrite
user32
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.VCrypt0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VCrypt1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/VERY IMPORTANT!.txt
-
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/单机游戏下载.url
-
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/游戏工具大全.url
-
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/游戏攻略大全.url
-
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/游戏秘籍大全.url
-
《热血无赖》v1.0一项属性修改器/Sleeping.Dogs.v1.0.tr1/游戏补丁大全.url