36662f133a35f576e7e6bc25b321655a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

36662f133a35f576e7e6bc25b321655a_JaffaCakes118
Size

275KB
MD5

36662f133a35f576e7e6bc25b321655a
SHA1

0a5e3887bbb4dfff8ee9dad9480664a72af4fcb4
SHA256

e65101af480a56d43645c6c41e1cdbe04302792c5a700248a32add6e59cb0f15
SHA512

40b6a484e4d1e648b056bcb924bbb1fb956f9ed8d8a20b624b9f6d8c3a4a136391761b18ee7fe433af3a4df01716212d50fa2bcba4160292aba36898f0d73ab4
SSDEEP

6144:+2vKUqacvCsR/ZGbFOeA0vjh8l5fJ+aFBNZ7ok9:FKBaACsrkvjOlT+W1P9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/systracer_setup_en.exe

Files

36662f133a35f576e7e6bc25b321655a_JaffaCakes118
.rar
systracer_setup_en.exe
.exe windows:4 windows x86 arch:x86

b7ef3729bbc2604a0f4bd435224c01e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RaiseException
HeapSize
GetACP
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
ExitThread
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetExitCodeProcess
CreateProcessA
CompareStringA
CompareStringW
CreateThread
GetProfileStringA
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
CreateDirectoryA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
TerminateProcess
ExitProcess
SetCurrentDirectoryA
SetEnvironmentVariableA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
GetFileSize
GetTickCount
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetFileTime
GetFullPathNameA
GetFileAttributesA
GetCurrentDirectoryA
WritePrivateProfileStringA
GetThreadLocale
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
GlobalAlloc
lstrcmpA
GetCurrentThread
FormatMessageA
LocalFree
InterlockedIncrement
SetLastError
InterlockedDecrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetLastError
ExpandEnvironmentStringsA
SearchPathA
WideCharToMultiByte
MulDiv
lstrcpynA
lstrcpynW
MultiByteToWideChar
GetModuleHandleA
GetVersionExA
CreateFileA
DeviceIoControl
ResumeThread
SuspendThread
TerminateThread
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
FileTimeToLocalFileTime
FileTimeToSystemTime
RemoveDirectoryA
lstrlenA
GetTempPathA
GetWindowsDirectoryA
GetComputerNameA
FindFirstFileA
FindNextFileA
Sleep
OpenProcess
CloseHandle
GetModuleFileNameA
FindFirstFileW
DeleteFileA
FindNextFileW
FindClose
GetLogicalDrives
GetDriveTypeA
lstrlenW
EnterCriticalSection
LeaveCriticalSection
GetEnvironmentStringsW

user32

SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
ScreenToClient
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
GetWindowPlacement
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
wsprintfA
SetScrollPos
GetScrollPos
SystemParametersInfoA
DrawEdge
SetCursor
LoadCursorA
SetParent
SetWindowLongA
DrawIconEx
DestroyIcon
GetDesktopWindow
CopyRect
GetCursorPos
CreatePopupMenu
GetDC
CopyAcceleratorTableA
ReleaseDC
PeekMessageA
TranslateMessage
InflateRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
DispatchMessageA
RedrawWindow
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
ShowWindow
GetWindow
AdjustWindowRectEx
GetWindowLongA
WindowFromDC
GetSysColor
FillRect
PtInRect
ReleaseCapture
SetCapture
SetActiveWindow
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
LoadBitmapA
GetFocus
FindWindowA
IsZoomed
SetForegroundWindow
PostThreadMessageA
RegisterClipboardFormatA
CharUpperA
MessageBeep
GetNextDlgGroupItem
GetNextDlgTabItem
SetRect
FindWindowExA
SetFocus
GetWindowThreadProcessId
WaitForInputIdle
PostMessageA
SetTimer
KillTimer
InvalidateRect
IsWindow
SendMessageA
GetWindowRect
GetParent
OffsetRect
EnableWindow
IsWindowUnicode
GetClientRect
CharNextA
LoadStringA
GetSysColorBrush
GetClassNameA
DestroyMenu
MapDialogRect
SetWindowContextHelpId
GetMessageA
ValidateRect
PostQuitMessage
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
WindowFromPoint
GetMenuCheckMarkDimensions
GetTabbedTextExtentA
GetMenuState
DrawTextA
ModifyMenuA

gdi32

ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
DeleteObject
GetWindowExtEx
CreatePen
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetMapMode
LPtoDP
GetTextColor
GetBkColor
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
CreateRectRgnIndirect
DPtoLP
GetDeviceCaps
Polygon
TextOutW
GetObjectA
SetPixel
GetPixel
GetTextExtentPoint32A
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateFontIndirectA
SelectObject
CreateBitmap
SetBitmapBits
CreateSolidBrush
GetViewportExtEx
CreateDIBitmap
GetTextExtentPointA
GetStockObject

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegQueryInfoKeyA
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueW
RegQueryInfoKeyW
RegEnumValueA
QueryServiceConfig2A
RegCloseKey
OpenSCManagerA
EnumServicesStatusA
CloseServiceHandle
OpenServiceA
QueryServiceConfigA

shell32

SHGetSpecialFolderPathA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

comctl32

ImageList_AddMasked
ImageList_Draw
ImageList_GetIcon
ImageList_LoadImageA
ord17
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoInitialize
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SafeArrayAccessData
SafeArrayDestroy
SysFreeString
SafeArrayCreateVector
SysAllocString
VariantClear
SysAllocStringLen
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SysAllocStringByteLen
VariantChangeType
VariantTimeToSystemTime
SysStringLen
SafeArrayUnaccessData

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

Sections

.text
Size: 432KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

b7ef3729bbc2604a0f4bd435224c01e1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

version

Sections

.text Size: 432KB - Virtual size: 429KB

.rdata Size: 100KB - Virtual size: 96KB

.data Size: 32KB - Virtual size: 52KB

.rsrc Size: 96KB - Virtual size: 95KB

.text
Size: 432KB - Virtual size: 429KB

.rdata
Size: 100KB - Virtual size: 96KB

.data
Size: 32KB - Virtual size: 52KB

.rsrc
Size: 96KB - Virtual size: 95KB