Static task
static1
Behavioral task
behavioral1
Sample
Djinni.exe
Resource
win10v2004-20230220-es
General
-
Target
Djinni.exe
-
Size
328KB
-
MD5
75f233abc929e2b383ca6e866c770195
-
SHA1
f730437969c8229c4b4f8c0b73510349617f035f
-
SHA256
0ef9c963dd7c1cfdf499204fb0c5150e24786475c36074d6034d8b3226bbef08
-
SHA512
f6d7f29fcde545b6689abcf75e71f06775c0bdb08fe331dad3b904d5066043c86bc5c9ed22226d631c510ffd8f8cd732ac1d25bc68f7fb33202e46184a751369
-
SSDEEP
6144:UQADYx2wm5ccGb5gWBja+rSzGkNWDecgRE1G:UhYx215ccGdgWXSzGkoAM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Djinni.exe
Files
-
Djinni.exe.exe windows x86
93cdc1b829e39cc6dbfd81456c32fda9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
steam_api
SteamAPI_UnregisterCallback
SteamAPI_RegisterCallback
SteamUser
SteamAPI_RunCallbacks
SteamAPI_Init
SteamAPI_RestartAppIfNecessary
SteamApps
xmllite
CreateXmlReader
gdiplus
GdipDrawImageI
GdipCreateFromHDC
GdipDrawImagePointsI
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectI
GdiplusStartup
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCreateBitmapFromScan0
GdiplusShutdown
GdipCloneImage
GdipAlloc
GdipFree
GdipLoadImageFromFile
GdipCreateBitmapFromHBITMAP
winhttp
WinHttpSendRequest
WinHttpOpen
WinHttpReadData
WinHttpQueryHeaders
WinHttpCloseHandle
WinHttpReceiveResponse
WinHttpCrackUrl
WinHttpSetStatusCallback
WinHttpOpenRequest
WinHttpConnect
WinHttpSetOption
kernel32
LCMapStringW
HeapReAlloc
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetConsoleMode
GetConsoleCP
FlushFileBuffers
DeleteCriticalSection
GetFileType
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
InterlockedIncrement
GetFileAttributesA
CreateEventA
CloseHandle
GetLogicalDrives
GetDriveTypeA
CreateFileA
GetFileSizeEx
ReadFile
GetLastError
GetOverlappedResult
FormatMessageA
LocalAlloc
SetFilePointerEx
LocalSize
LocalFree
FindResourceExA
LoadResource
LockResource
WideCharToMultiByte
GetUserDefaultLangID
SetThreadLocale
GetUserDefaultLCID
LoadLibraryA
GetModuleFileNameA
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
TlsFree
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
HeapSize
GetModuleFileNameW
WriteFile
GetStdHandle
AreFileApisANSI
GetProcAddress
GetModuleHandleExW
ExitProcess
InterlockedDecrement
GetProcessHeap
RtlUnwind
RaiseException
GetCommandLineA
MultiByteToWideChar
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
HeapAlloc
HeapFree
GetStartupInfoW
GetModuleHandleW
GetStringTypeW
SetStdHandle
WriteConsoleW
CreateFileW
SetEndOfFile
lstrlenA
ReadConsoleW
user32
DefWindowProcA
PostQuitMessage
InvalidateRect
PostMessageA
EndPaint
BeginPaint
GetClientRect
UpdateWindow
SetWindowPos
GetSystemMetrics
CreateWindowExA
LoadBitmapA
RegisterClassExA
LoadIconA
KillTimer
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
SetTimer
SetForegroundWindow
LoadAcceleratorsA
LoadCursorA
DialogBoxIndirectParamA
EndDialog
SetCursor
HideCaret
SetFocus
SendMessageA
GetDlgItem
SetWindowTextA
MessageBoxA
ShowWindow
advapi32
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptReleaseContext
shell32
ShellExecuteW
ole32
CreateStreamOnHGlobal
shlwapi
PathRemoveFileSpecA
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ