5d8a6006d58311bef5abd5adb612a1f3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
5d8a6006d58311bef5abd5adb612a1f3_JaffaCakes118
Size 574KB
Sample241019-tx7zlsxepp
SHA256 b232cb59a8a9803dfe5a378b7d6be3b14277d26e64da2b6fef803abdf9253b5a
MD5 5d8a6006d58311bef5abd5adb612a1f3
SHA1 35e914f77ae77f7863d9245c7ceb7187ec3cd0b4
SHA512 3804c178d16b9451cb1b4a6ff96e004f546893f346918d1546804feacea7c42612f732975fe2b92c95c21ea48ece9abf158a74e05ad4d15a16ff915f0cc4a5cb
SSDEEP 12288:bPuv2dgRrR55Jr070svFsityQfS5y+3hoM1UHCIhlGe1C8:bPu2dgDv507VtsyMhvmhlG0C8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/希望龙将辅助V1.10.exe

File Explorer

5d8a6006d58311bef5abd5adb612a1f3_JaffaCakes118

.rar 574KB
V1.10更新说明.txt

294B
Xiwang_lj.ini

48B
Xiwang_rxhzw.ini

1KB
下载说明.txt

713B
希望龙将辅助V1.10.exe

.exe 1.6MB
挂挂一族.url

.url 116B
牛牛牛电影网.url

.url 117B
说明.txt

372B

5d8a6006d58311bef5abd5adb612a1f3_JaffaCakes118

SHA256 b232cb59a8a9803dfe5a378b7d6be3b14277d26e64da2b6fef803abdf9253b5a
MD5 5d8a6006d58311bef5abd5adb612a1f3
SHA1 35e914f77ae77f7863d9245c7ceb7187ec3cd0b4
SHA512 3804c178d16b9451cb1b4a6ff96e004f546893f346918d1546804feacea7c42612f732975fe2b92c95c21ea48ece9abf158a74e05ad4d15a16ff915f0cc4a5cb
SSDEEP 12288:bPuv2dgRrR55Jr070svFsityQfS5y+3hoM1UHCIhlGe1C8:bPu2dgDv507VtsyMhvmhlG0C8
MD5 SHA1 SHA512 SSDEEP

希望龙将辅助V1.10.exe

IMPHASH c1001e4edad4faff4f26a0b66c922d32
SHA256 e83e7836be434c12a11cc67f5516f25c7a6ff882fa813ab63320f1343ca317a9
MD5 103857ad02909593f526977a2ba0baad
SHA1 a93aeb2cb16b546e582d9652fe04136d128a34c1
SHA512 8505fae27f2310d1b8542290016ddb961592ef14ba7adef75b83e6d4c0ee91ce1b8be6a3ad15db38aa411b8220f84e86c01cf01d0afd74313015f8f496a21a44
SSDEEP 24576:2QTyRwFi5shSU9NbdQg9SpQz4dt1s48exb4ZJSGON0apq/2/2+nG3l:29lBpQ0xPcjSGi0aA2fG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1020940

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvfw32

DrawDibDraw

avifil32

AVIStreamGetFrame AVIStreamInfoA

winmm

midiStreamClose PlaySoundA waveOutUnprepareHeader waveOutPrepareHeader waveOutWrite waveOutPause midiStreamStop midiOutReset waveOutReset midiStreamRestart waveOutClose waveOutGetNumDevs waveOutOpen midiStreamOut midiOutPrepareHeader midiStreamProperty midiStreamOpen midiOutUnprepareHeader

ws2_32

WSAStartup gethostbyname inet_ntoa inet_addr WSACleanup select closesocket WSAAsyncSelect htons socket recvfrom ioctlsocket connect recv getpeername accept send

rasapi32

RasGetConnectStatusA RasHangUpA

kernel32

QueryPerformanceFrequency QueryPerformanceCounter GetTimeZoneInformation GetVersion FileTimeToSystemTime InterlockedIncrement InterlockedDecrement SetLastError LocalFree FormatMessageA FileTimeToLocalFileTime lstrcpynA DuplicateHandle FlushFileBuffers LockFile UnlockFile SetEndOfFile GetThreadLocale lstrcmpiA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA lstrcmpA LocalAlloc TlsAlloc GlobalHandle TlsFree TlsSetValue LocalReAlloc TlsGetValue GetFileTime GetCurrentThread GlobalFlags SetErrorMode GetProcessVersion GetCPInfo GetOEMCP GetStartupInfoA RtlUnwind GetSystemTime GetLocalTime RaiseException HeapSize GetACP SetStdHandle GetFileType UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree SetEnvironmentVariableA LCMapStringA LCMapStringW VirtualAlloc IsBadWritePtr SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW CompareStringA CompareStringW IsBadReadPtr IsBadCodePtr MultiByteToWideChar TerminateProcess GetCurrentProcess GetFileSize SetFilePointer CreateSemaphoreA ResumeThread ReleaseSemaphore EnterCriticalSection LeaveCriticalSection GetProfileStringA WriteFile ReadFile GetLastError WaitForMultipleObjects CreateFileA DeviceIoControl SetEvent FindResourceA LoadResource LockResource GetModuleFileNameA GetCurrentThreadId ExitProcess GlobalSize GlobalFree DeleteCriticalSection InitializeCriticalSection lstrcatA WinExec lstrcpyA FindNextFileA GlobalReAlloc HeapFree HeapReAlloc GetProcessHeap HeapAlloc GetFullPathNameA FreeLibrary LoadLibraryA lstrlenA GetVersionExA WritePrivateProfileStringA GetPrivateProfileStringA CreateThread CreateEventA Sleep GlobalAlloc GlobalLock GlobalUnlock GetTempPathA FindFirstFileA FindClose GetFileAttributesA DeleteFileA CopyFileA GetCurrentDirectoryA SetCurrentDirectoryA GetVolumeInformationA GetModuleHandleA GetProcAddress GetDiskFreeSpaceA MulDiv GetCommandLineA GetTickCount CreateProcessA WaitForSingleObject CloseHandle InterlockedExchange WideCharToMultiByte

user32

CharNextA SetWindowContextHelpId MapDialogRect LoadStringA GetSysColorBrush GetNextDlgGroupItem PostThreadMessageA WindowFromDC EnumChildWindows GetWindowDC UnhookWindowsHookEx CallNextHookEx SetWindowsHookExA FrameRect GetPropA MoveWindow CallWindowProcA SetPropA DrawTextA GetCursor SystemParametersInfoA TranslateMessage LoadIconA DrawFrameControl DrawEdge DrawFocusRect WindowFromPoint GetMessageA DispatchMessageA SetRectEmpty RegisterClipboardFormatA CreateIconFromResourceEx CreateIconFromResource DrawIconEx CreatePopupMenu AppendMenuA ModifyMenuA CreateMenu CreateAcceleratorTableA GetDlgCtrlID GetSubMenu EnableMenuItem ClientToScreen EnumDisplaySettingsA LoadImageA ShowWindow IsWindowEnabled TranslateAcceleratorA GetKeyState CopyAcceleratorTableA PostQuitMessage IsZoomed GetSystemMenu DeleteMenu GetClassInfoA DefWindowProcA GetMenu SetMenu PeekMessageA GetMenuCheckMarkDimensions SetFocus GetActiveWindow GetWindow DestroyAcceleratorTable SetWindowRgn GetMessagePos ScreenToClient ChildWindowFromPointEx CopyRect LoadBitmapA WinHelpA KillTimer SetTimer ReleaseCapture GetCapture SetCapture SetScrollRange SetScrollPos InflateRect SetRect IntersectRect DestroyIcon PtInRect OffsetRect IsWindowVisible EnableWindow RedrawWindow GetWindowLongA SetWindowLongA GetSysColor SetActiveWindow SetCursorPos LoadCursorA SetCursor GetDC FillRect IsRectEmpty ReleaseDC IsChild TrackPopupMenu DestroyMenu SetForegroundWindow GetWindowRect EqualRect UpdateWindow ValidateRect InvalidateRect GetClientRect GetFocus GetParent GetTopWindow PostMessageA IsWindow SetParent DestroyCursor SendMessageA SetWindowPos MessageBeep MessageBoxA GetCursorPos GetSystemMetrics EmptyClipboard SetClipboardData OpenClipboard GetClipboardData CloseClipboard wsprintfA WaitForInputIdle SetMenuItemBitmaps CheckMenuItem IsDialogMessageA ScrollWindowEx SendDlgItemMessageA MapWindowPoints AdjustWindowRectEx GetScrollPos RegisterClassA CreateWindowExA GetClassLongA RemovePropA GetMessageTime GetLastActivePopup GetForegroundWindow RegisterWindowMessageA GetWindowPlacement EndDialog CreateDialogIndirectParamA DestroyWindow EndPaint BeginPaint CharUpperA GetWindowTextLengthA FindWindowExA GetDlgItem GetClassNameA GetDesktopWindow GetNextDlgTabItem GetWindowTextA SetWindowTextA GetMenuItemCount GetMenuItemID GetMenuStringA GetMenuState GetTabbedTextExtentA DrawStateA GrayStringA IsIconic TabbedTextOutA GetScrollRange UnregisterClassA

gdi32

RoundRect GetCurrentObject DPtoLP LPtoDP Rectangle SetPixelV CreateCompatibleDC GetPixel GetTextExtentPoint32A StartPage Ellipse BitBlt StartDocA DeleteDC GetMapMode GetTextMetricsA GetViewportExtEx EndDoc EndPage CreateFontIndirectA GetStockObject CreateSolidBrush CombineRgn CreateRectRgn FillRgn PatBlt CreatePen GetObjectA SelectObject CreatePatternBrush CreateBitmap CreateHatchBrush CreateBrushIndirect CreateDCA CreateCompatibleBitmap GetPolyFillMode GetStretchBltMode GetROP2 GetBkColor GetBkMode GetTextColor CreateRoundRectRgn CreateEllipticRgn PathToRegion EndPath BeginPath GetWindowOrgEx GetViewportOrgEx GetWindowExtEx GetDIBits RealizePalette SelectPalette StretchBlt CreatePalette GetSystemPaletteEntries CreateDIBitmap DeleteObject SelectClipRgn CreatePolygonRgn GetClipRgn SetStretchBltMode SetPixel CreateDIBSection CreateRectRgnIndirect SetBkColor SetBkMode SetTextColor SetWindowOrgEx SaveDC RestoreDC CreatePenIndirect PtVisible RectVisible TextOutA ExtTextOutA Escape SetDIBitsToDevice SetPolyFillMode SetROP2 SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx GetClipBox ExcludeClipRect MoveToEx LineTo ExtSelectClipRgn GetDeviceCaps

msimg32

GradientFill

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

comdlg32

ChooseColorA GetOpenFileNameA GetSaveFileNameA GetFileTitleA

advapi32

RegCloseKey RegOpenKeyExA RegSetValueExA RegQueryValueA RegCreateKeyExA

shell32

ShellExecuteA Shell_NotifyIconA

ole32

CoGetClassObject CoTaskMemAlloc CLSIDFromProgID OleInitialize OleUninitialize CLSIDFromString StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CoFreeUnusedLibraries CoRegisterMessageFilter CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard CoTaskMemFree

oleaut32

SysFreeString SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetDim VariantTimeToSystemTime SysStringLen SysAllocStringLen SysAllocStringByteLen SafeArrayGetElemsize OleCreateFontIndirect SafeArrayGetLBound SafeArrayGetUBound VariantChangeType SysAllocString SafeArrayCreate UnRegisterTypeLi RegisterTypeLi LoadTypeLi VariantCopy VariantClear

comctl32

ord17 ImageList_SetBkColor ImageList_AddMasked ImageList_GetImageCount _TrackMouseEvent ImageList_GetImageInfo ImageList_Draw ImageList_Destroy ImageList_Create ImageList_Read ImageList_DrawIndirect ImageList_Duplicate ImageList_GetIcon

oledlg

ord8

wininet

InternetCanonicalizeUrlA InternetCrackUrlA HttpOpenRequestA HttpSendRequestA HttpQueryInfoA InternetReadFile InternetConnectA InternetSetOptionA InternetOpenA InternetCloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

5d8a6006d58311bef5abd5adb612a1f3_JaffaCakes118

V1.10更新说明.txt

Xiwang_lj.ini

Xiwang_rxhzw.ini

下载说明.txt

希望龙将辅助V1.10.exe

msvfw32

avifil32

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

wininet

generic

挂挂一族.url

牛牛牛电影网.url

说明.txt