jaffacakes118__15ca346f95f55c58d28b8ecf77400252

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118__15ca346f95f55c58d28b8ecf77400252
Size 304KB
Sample260920-3v8msseb45
SHA256 46a7253be44f40ee4240de19c8086fd537b7febfd0a9ef5944ae25fee7eaa377
MD5 15ca346f95f55c58d28b8ecf77400252
SHA1 92c70ec1828417eca59952660f22e1797d29d083
SHA512 1dfe5a78c34fd6f16df78f8f0c265aabc169fcbf9e623dacd9a23d34484b808f0ea7c06cb45b7c30b8636c2295bb3fab0352cafb82c1293fa5c060e616698a15
SSDEEP 3072:tpk8j+/QTl7vODGvJfNJePeP7LC037BZyirVecAW656SoHUfh7FEge74JvlTVEut:jj+EvWGvnPPCqlseVYW65I16Eu
TLSH
T122645B1273E08875D793537A0996DBA666B5EC344E60924FE3647F2DAE742C3883334E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118__15ca346f95f55c58d28b8ecf77400252

File Explorer

jaffacakes118__15ca346f95f55c58d28b8ecf77400252

.exe 304KB

jaffacakes118__15ca346f95f55c58d28b8ecf77400252

IMPHASH d87048f59c877a80902e1a2e43294f9d
SHA256 46a7253be44f40ee4240de19c8086fd537b7febfd0a9ef5944ae25fee7eaa377
MD5 15ca346f95f55c58d28b8ecf77400252
SHA1 92c70ec1828417eca59952660f22e1797d29d083
SHA512 1dfe5a78c34fd6f16df78f8f0c265aabc169fcbf9e623dacd9a23d34484b808f0ea7c06cb45b7c30b8636c2295bb3fab0352cafb82c1293fa5c060e616698a15
SSDEEP 3072:tpk8j+/QTl7vODGvJfNJePeP7LC037BZyirVecAW656SoHUfh7FEge74JvlTVEut:jj+EvWGvnPPCqlseVYW65I16Eu
TLSH
T122645B1273E08875D793537A0996DBA666B5EC344E60924FE3647F2DAE742C3883334E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97350

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\JinZQ\Hook开机启动\sttray-setup\Release\sttray.pdb

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

wininet

InternetReadFile InternetOpenUrlA InternetCloseHandle InternetOpenA InternetGetConnectedState HttpQueryInfoA

winmm

timeGetTime

kernel32

GetFileSize DuplicateHandle GetCurrentProcess FindClose FindFirstFileA GetVolumeInformationA GetFullPathNameA SetErrorMode FileTimeToLocalFileTime GetFileAttributesA GetFileTime ExitProcess RtlUnwind HeapAlloc HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery SetEndOfFile GetStartupInfoA GetCommandLineA HeapReAlloc HeapSize QueryPerformanceCounter GetCurrentProcessId HeapDestroy HeapCreate VirtualFree IsBadWritePtr GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetTimeZoneInformation SetStdHandle IsBadReadPtr IsBadCodePtr SetEnvironmentVariableA UnlockFile LockFile FlushFileBuffers RaiseException GetOEMCP GetCPInfo InterlockedIncrement GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc FileTimeToSystemTime InterlockedDecrement GetCurrentThread lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA SetLastError GlobalFree MulDiv GlobalAlloc GlobalLock GlobalUnlock FormatMessageA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcatA lstrcmpW lstrcpynA GetModuleHandleA LocalFree CreateThread LoadLibraryA GetProcAddress FreeLibrary CreateMutexA GetPrivateProfileStringA WritePrivateProfileStringA OpenProcess GetPriorityClass TerminateProcess FindResourceA LoadResource LockResource SizeofResource CreateToolhelp32Snapshot Process32First Process32Next GetModuleFileNameA CopyFileA CreateProcessA CompareStringW CompareStringA lstrcmpiA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange WriteFile CreateFileA ReadFile SetFilePointer CloseHandle BeginUpdateResourceA UpdateResourceA EndUpdateResourceA CreateDirectoryA GetTickCount Sleep MoveFileExA lstrlenA DeleteFileA GetSystemTimeAsFileTime

user32

RegisterClipboardFormatA PostThreadMessageA ReleaseCapture SetCapture CharNextA LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu SetWindowContextHelpId MapDialogRect wsprintfA GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect SetCursor PostQuitMessage SetMenuItemBitmaps ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA IsWindowEnabled ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA GetFocus IsWindow SetFocus IsChild GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints MessageBoxA GetKeyState SetForegroundWindow IsWindowVisible GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount GetSysColor AdjustWindowRectEx GetParent EqualRect GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA MessageBeep GetNextDlgGroupItem InvalidateRgn GetWindowLongA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect CopyRect PtInRect GetWindow GetSystemMetrics InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty LoadIconA GetClientRect IsIconic GetSystemMenu SendMessageA AppendMenuA DrawIcon CharUpperA GetIconInfo EnableWindow SendDlgItemMessageA UpdateWindow SetDlgItemTextA RemovePropA

gdi32

ExtSelectClipRgn GetStockObject PtVisible GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode GetWindowExtEx GetViewportExtEx ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape TextOutA GetDeviceCaps CreateBitmap SetBkColor SetTextColor GetClipBox DeleteObject CreateCompatibleDC GetDIBits DeleteDC GetObjectA SetMapMode RestoreDC SaveDC ExtTextOutA RectVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegEnumValueA RegOpenKeyExA RegOpenKeyA RegQueryValueExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

shell32

SHGetSpecialFolderPathA ShellExecuteA ExtractIconA

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoGetClassObject CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID CLSIDFromString CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes

oleaut32

VariantClear SafeArrayDestroy VariantCopy SysAllocStringByteLen SysStringLen SysAllocStringLen SysFreeString VariantInit VariantChangeType SysAllocString SystemTimeToVariantTime OleCreateFontIndirect

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118__15ca346f95f55c58d28b8ecf77400252

version

wininet

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

generic