jaffacakes118__751e4fd9d9bb47240296d9132bc62498

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__751e4fd9d9bb47240296d9132bc62498
Size 304KB
Sample260919-hsayjay17n
SHA256 1e94bf131c29dd77cca307db64a732756f905ddc96db62a02ec39042c70e957f
MD5 751e4fd9d9bb47240296d9132bc62498
SHA1 67e0650a858968eff44f5c4b3c936aed3a0c16c6
SHA512 43175485fadaee4ec0944155c579d0166912546abc3e17100abe9c934e1a6ab60f1d85cc8dd8244b23554757b2a969b2b6c49d56616c1dee47d414bc0524849a
SSDEEP 3072:DgnwcagbhB7hBl+cbceaRbVktR2Db8qNZQlGQHacCTP/n5h1u1E9RZMxClmXw8o9:IagNB7hBb4bCH2HXOl3CTPPRQHo
TLSH
T10A645A1176A0893AC3E717764D93EBA512B6BD746E70D64FE2643E2D8A311C3663330E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__751e4fd9d9bb47240296d9132bc62498

File Explorer

jaffacakes118__751e4fd9d9bb47240296d9132bc62498

.exe 304KB

jaffacakes118__751e4fd9d9bb47240296d9132bc62498

IMPHASH 5737dbb70e0c76eb8c7e3a1bf8222949
SHA256 1e94bf131c29dd77cca307db64a732756f905ddc96db62a02ec39042c70e957f
MD5 751e4fd9d9bb47240296d9132bc62498
SHA1 67e0650a858968eff44f5c4b3c936aed3a0c16c6
SHA512 43175485fadaee4ec0944155c579d0166912546abc3e17100abe9c934e1a6ab60f1d85cc8dd8244b23554757b2a969b2b6c49d56616c1dee47d414bc0524849a
SSDEEP 3072:DgnwcagbhB7hBl+cbceaRbVktR2Db8qNZQlGQHacCTP/n5h1u1E9RZMxClmXw8o9:IagNB7hBb4bCH2HXOl3CTPPRQHo
TLSH
T10A645A1176A0893AC3E717764D93EBA512B6BD746E70D64FE2643E2D8A311C3663330E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

96877

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\JinZQ\Hook开机启动\sttray\Release\sttray.pdb

wininet

InternetReadFile InternetOpenA InternetGetConnectedState InternetOpenUrlA HttpQueryInfoA InternetCloseHandle

winmm

timeGetTime

kernel32

DuplicateHandle GetCurrentProcess GetVolumeInformationA GetFullPathNameA SetErrorMode GetFileAttributesA GetFileTime ExitProcess RtlUnwind HeapAlloc HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetSystemTimeAsFileTime GetStartupInfoA GetCommandLineA HeapReAlloc GetFileSize QueryPerformanceCounter GetCurrentProcessId HeapDestroy HeapCreate VirtualFree IsBadWritePtr GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType SetUnhandledExceptionFilter GetTimeZoneInformation GetDriveTypeA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetStdHandle IsBadReadPtr IsBadCodePtr SetEnvironmentVariableA SetEndOfFile UnlockFile LockFile FlushFileBuffers GetCurrentDirectoryA RaiseException GetOEMCP GetCPInfo InterlockedIncrement GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc FindFirstFileA FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileA FindClose InterlockedDecrement GetCurrentThread lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA SetLastError GlobalFree MulDiv GlobalAlloc GlobalLock GlobalUnlock FormatMessageA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom LoadLibraryA FreeLibrary lstrcatA lstrcmpW lstrcpynA GetModuleHandleA GetProcAddress LocalFree CreateThread TerminateProcess SetFileAttributesA CopyFileA GetModuleFileNameA GetPrivateProfileStringA WritePrivateProfileStringA FindResourceA LoadResource LockResource SizeofResource CompareStringW CompareStringA lstrcmpiA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange WriteFile CreateFileA ReadFile SetFilePointer CloseHandle CreateDirectoryA GetTickCount Sleep MoveFileExA lstrlenA DeleteFileA HeapSize

user32

RegisterClipboardFormatA PostThreadMessageA CopyAcceleratorTableA SetRect IsRectEmpty ReleaseCapture SetCapture CharNextA LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu SetWindowContextHelpId MapDialogRect wsprintfA GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect SetCursor PostQuitMessage SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetFocus IsWindow SetFocus IsChild GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints MessageBoxA GetKeyState SetForegroundWindow IsWindowVisible GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx GetParent EqualRect GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect CopyRect PtInRect GetWindow GetSystemMetrics LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA AppendMenuA DrawIcon CharUpperA EnableWindow SendDlgItemMessageA UpdateWindow GetClassInfoExA

gdi32

GetStockObject PtVisible GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode GetWindowExtEx GetViewportExtEx ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA SetBkColor SetTextColor GetClipBox DeleteObject DeleteDC GetObjectA SetMapMode RestoreDC SaveDC ExtTextOutA GetDeviceCaps CreateBitmap RectVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegEnumValueA RegOpenKeyExA RegOpenKeyA RegQueryValueExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

shell32

SHGetPathFromIDListA SHGetSpecialFolderLocation

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleUninitialize CoTaskMemAlloc CoTaskMemFree CoInitialize CoCreateInstance CoUninitialize CreateILockBytesOnHGlobal CLSIDFromProgID CLSIDFromString CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject OleInitialize CoFreeUnusedLibraries StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject

oleaut32

VariantClear SystemTimeToVariantTime SafeArrayDestroy VariantCopy SysAllocStringByteLen SysStringLen SysAllocStringLen SysFreeString VariantInit VariantChangeType SysAllocString OleCreateFontIndirect

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__751e4fd9d9bb47240296d9132bc62498

wininet

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

generic