caffeine64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

caffeine64.exe
Size

423KB
MD5

94eb3de6900dfa5c1165cfe416096a72
SHA1

a098e25990ad1f0e8bedb0764ab63f6ba5fc5926
SHA256

c0593b4b65bb264a982d61a7b84f38b10a41972b49a217ef3a80a906a0c4ee08
SHA512

01c1ecddd30af98488668ed53cff9afb02ebe6262e88ccef34353baff133ed06ac395609a6194c1b9b2b42bafe8707fe6494c8ef88bd574472c643aebe211a24
SSDEEP

6144:E41JKq9T+/k5AgVHDljl5g/dObY34CkfSy5rJUgj2TpgdEhpNACHXivi5:ja0+/i9Tl5gmYrMSy5uuEzHXv5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caffeine64.exe

Files

caffeine64.exe
.exe windows x64

4a6b284b9193edd74acb156ad1b9d541

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

GetWindowRect
InflateRect
PtInRect
SetCursor
GetSystemMetrics
LoadIconW
EnableWindow
GetClientRect
GetDC
SendMessageW
RedrawWindow
SetCapture
GetParent
ReleaseCapture
IsWindow
GetSysColor
MessageBeep
CopyIcon
ReleaseDC
InvalidateRect
IsIconic
UnregisterClassW
GetSysColorBrush
UnpackDDElParam
ReuseDDElParam
DestroyMenu
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorW
WindowFromPoint
LoadCursorW
SetWindowLongW
GetWindow
SetTimer
GetDesktopWindow
GetCursorPos
GetWindowTextW
GetTopWindow
SendInput
GetAsyncKeyState
FindWindowW
RegisterWindowMessageW
SystemParametersInfoW
GetMenuItemID
GetSubMenu
LoadMenuW
PostMessageW
KillTimer
SetActiveWindow
SetForegroundWindow
SetMenuDefaultItem
TrackPopupMenu
ModifyMenuW
GetClassNameW
CopyRect
FillRect
DrawEdge
DrawTextW
GetMenuItemCount
GetMenuState
GetMenuItemInfoW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
GetMenuStringW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
PostQuitMessage
CheckMenuItem
EnableMenuItem
GetFocus
LoadBitmapW
SetMenuItemBitmaps
ValidateRect
PeekMessageW
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageW
TranslateMessage
GetMessageW
CallNextHookEx
SetWindowsHookExW
ShowOwnedPopups
MessageBoxW
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetWindowThreadProcessId
UnhookWindowsHookEx
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
GetMenu
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
UpdateWindow
SetMenu
MapWindowPoints
GetMessagePos
GetMessageTime
SetWindowLongPtrW
GetWindowLongPtrW
DestroyWindow
GetDlgItem
EndDeferWindowPos
BeginDeferWindowPos
GetForegroundWindow
GetWindowTextLengthW
SetFocus
RemovePropW
GetPropW
SetPropW
GetClassLongPtrW
GetCapture
WinHelpW
SendDlgItemMessageW
SendDlgItemMessageA
IsDialogMessageW
SetWindowTextW
ShowWindow
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
TabbedTextOutW
DrawTextExW
GrayStringW

wtsapi32

WTSRegisterSessionNotification

kernel32

LoadLibraryA
CompareStringW
GlobalFindAtomW
FreeResource
lstrlenW
GlobalFree
GlobalUnlock
LocalFree
FormatMessageW
GlobalGetAtomNameW
lstrlenA
WritePrivateProfileStringW
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
InitializeCriticalSection
TlsAlloc
GlobalReAlloc
GlobalHandle
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetVersionExA
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
SetErrorMode
GetStartupInfoW
RtlLookupFunctionEntry
RtlUnwindEx
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
Sleep
ExitProcess
RaiseException
RtlPcToFileHeader
HeapReAlloc
HeapQueryInformation
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetCurrentProcessId
SetLastError
GlobalAddAtomW
CloseHandle
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
GetModuleFileNameW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
WideCharToMultiByte
CompareStringA
GlobalLock
GlobalAlloc
GetModuleHandleW
GetProcAddress
GetVersion
GetVersionExW
SetThreadExecutionState
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetSystemPowerStatus
lstrcmpW
MulDiv
GetWindowsDirectoryW
LoadLibraryW
FreeLibrary
GetLastError
GetTickCount

gdi32

DPtoLP
CreateSolidBrush
CreatePatternBrush
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
Rectangle
ExcludeClipRect
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
GetTextExtentPoint32W
GetObjectW
CreateFontIndirectW
GetStockObject
GetPixel

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegQueryValueW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

DragQueryFileW
DragFinish
Shell_NotifyIconW
ShellExecuteW

shlwapi

PathFindExtensionW
PathFindFileNameW

oleaut32

VariantInit
VariantChangeType
VariantClear
SystemTimeToVariantTime
VariantTimeToSystemTime

pdh

PdhOpenQueryW
PdhCloseQuery
PdhGetFormattedCounterValue
PdhCollectQueryData
PdhAddCounterW

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a6b284b9193edd74acb156ad1b9d541

Headers

DLL Characteristics

File Characteristics

Imports

user32

wtsapi32

kernel32

gdi32

winspool.drv

advapi32

shell32

shlwapi

oleaut32

pdh

Sections

.text Size: 240KB - Virtual size: 239KB

.rdata Size: 91KB - Virtual size: 90KB

.data Size: 12KB - Virtual size: 35KB

.pdata Size: 18KB - Virtual size: 17KB

.rsrc Size: 61KB - Virtual size: 61KB

.text
Size: 240KB - Virtual size: 239KB

.rdata
Size: 91KB - Virtual size: 90KB

.data
Size: 12KB - Virtual size: 35KB

.pdata
Size: 18KB - Virtual size: 17KB

.rsrc
Size: 61KB - Virtual size: 61KB