jaffacakes118_not-a-virus[.]RiskTool[.]Win32[.]Inject[.]vpb[.]7447ca1efd60aabe5c706272af9e6205

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.RiskTool.Win32.Inject.vpb.7447ca1efd60aabe5c706272af9e6205
Size 312KB
Sample261018-tspbpsbg39
SHA256 fcd303d20e1a80ba68af288f9618757390db25cbafc9d35e7f2d7b900e3232d1
MD5 7447ca1efd60aabe5c706272af9e6205
SHA1 15e1a03951f56949a735b80606fdea40a0d44aa2
SHA512 14e7b1fefab15a7033edb411206f7e52cb1fa237104d95ba03c3f8aefd97472ad7322627d3ea682d46bdfc4a83ff7fbacc5c8619b4d603469fe7b9ae6a97ccdd
SSDEEP 3072:bF/0zA4OZqbGVIe5G0LYhxwIPk07sOWuTglaJ615SXRu1GlSFcXfHZlml4VXmvoV:bN0zIZqD0EhFPzuaSShJYF45nWgH
TLSH
T10D648D1332E0C8B6C26321724EE2C7E972B6FD249B32968737887F5E5E316C19535396
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.RiskTool.Win32.Inject.vpb.7447ca1efd60aabe5c706272af9e6205

File Explorer

jaffacakes118_not-a-virus.RiskTool.Win32.Inject.vpb.7447ca1efd60aabe5c706272af9e6205

.exe 312KB

jaffacakes118_not-a-virus.RiskTool.Win32.Inject.vpb.7447ca1efd60aabe5c706272af9e6205

IMPHASH bd7afac887565b5607affbdd160239ba
SHA256 fcd303d20e1a80ba68af288f9618757390db25cbafc9d35e7f2d7b900e3232d1
MD5 7447ca1efd60aabe5c706272af9e6205
SHA1 15e1a03951f56949a735b80606fdea40a0d44aa2
SHA512 14e7b1fefab15a7033edb411206f7e52cb1fa237104d95ba03c3f8aefd97472ad7322627d3ea682d46bdfc4a83ff7fbacc5c8619b4d603469fe7b9ae6a97ccdd
SSDEEP 3072:bF/0zA4OZqbGVIe5G0LYhxwIPk07sOWuTglaJ615SXRu1GlSFcXfHZlml4VXmvoV:bN0zIZqD0EhFPzuaSShJYF45nWgH
TLSH
T10D648D1332E0C8B6C26321724EE2C7E972B6FD249B32968737887F5E5E316C19535396
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

64898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

g:\发布软件\!英文\extreme injector\bin\extremeinjector.pdb

kernel32

GetFileTime GetTickCount RtlUnwind HeapAlloc HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetStartupInfoA GetCommandLineA HeapReAlloc TerminateProcess HeapSize QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW HeapDestroy VirtualFree IsBadWritePtr GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr SetStdHandle SetEnvironmentVariableA FileTimeToLocalFileTime SetErrorMode GetOEMCP GetCPInfo CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFlags FileTimeToSystemTime TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW WritePrivateProfileStringA FreeResource GlobalAddAtomA GetCurrentThread GetCurrentThreadId FreeLibrary GlobalDeleteAtom lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA LoadLibraryA SetLastError GlobalFree MulDiv GlobalAlloc GlobalLock GlobalUnlock FormatMessageA lstrcpynA LocalFree CompareStringW CompareStringA lstrlenA lstrcmpiA GetVersion GetLastError CreateThread GetFileAttributesA Module32First Process32First Sleep Process32Next CreateToolhelp32Snapshot ExitProcess MultiByteToWideChar GetCurrentProcess OutputDebugStringA OpenProcess VirtualAllocEx WriteProcessMemory GetModuleHandleA GetProcAddress CreateRemoteThread WaitForSingleObject VirtualFreeEx CloseHandle GetModuleFileNameA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource GetVersionExA GetThreadLocale GetLocaleInfoA GetACP HeapCreate InterlockedExchange

user32

PostThreadMessageA DestroyMenu MessageBeep GetNextDlgGroupItem InvalidateRgn InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty CharNextA ReleaseCapture SetCapture LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA MoveWindow SetWindowTextA IsDialogMessageA SetDlgItemTextA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA SetFocus IsChild GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime RegisterClipboardFormatA MapWindowPoints UpdateWindow GetMenu GetSysColor AdjustWindowRectEx EqualRect GetClassInfoA RegisterClassA UnregisterClassA GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect PtInRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos wsprintfA ReleaseDC GetDC CopyRect GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog SetMenuItemBitmaps GetFocus ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect MessageBoxA GetParent GetWindowLongA GetLastActivePopup IsWindowEnabled GetMessagePos SetCursor PostQuitMessage PostMessageA GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu CharUpperA FindWindowA ShowWindow SetForegroundWindow GetSystemMetrics EnableWindow LoadIconA GetClientRect IsIconic SendMessageA DrawIcon wvsprintfA

gdi32

TextOutA GetMapMode GetBkColor GetTextColor GetRgnBox RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape GetDeviceCaps SetMapMode RestoreDC SaveDC GetObjectA SetBkColor SetTextColor GetClipBox CreateRectRgnIndirect CreateBitmap ExtTextOutA

comdlg32

GetOpenFileNameA GetSaveFileNameA GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

LookupPrivilegeValueA OpenProcessToken RegCloseKey RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA AdjustTokenPrivileges RegSetValueExA RegCreateKeyExA

shell32

SHGetFileInfoA ShellExecuteA

comctl32

ord17 ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID CLSIDFromString CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject OleInitialize

oleaut32

OleCreateFontIndirect SysAllocString SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy VariantCopy VariantInit VariantChangeType VariantClear SysAllocStringLen SysAllocStringByteLen SysStringLen SysFreeString

wininet

HttpQueryInfoA InternetReadFile InternetOpenA InternetConnectA HttpOpenRequestA HttpAddRequestHeadersA HttpSendRequestA InternetCloseHandle