JiYuTrainerOldForWinXP[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
JiYuTrainerOldForWinXP.exe
Size 4.0MB
Sample261027-da8dvs1shy
SHA256 a74cf0701208990ccd15244bf86e9b5162356f7fbee250c35aee295f223c8105
MD5 14303ec802e12e1086ac4461e7ddfc82
SHA1 5215260c55ddcc446f65d71b1a46bf84aed7754f
SHA512 316f8622a1b6a076c08fa0c0ae4f9e3f35cddff3fc05a1e8176f682ad68126eec9ef42d55c0754bbc13f000cbc38ad2eeff3e24a2328bfdbfeb1d716e94e99fc
SSDEEP 49152:KBsSQIU34fgEPfsd2IazsalOQ2cYnbEInu0GAv5tpdxfKrEUXwGCGkkZ14809VE9:pIU3EPRAalOQwGAxtrIELzfkZ14kn9
TLSH
T19C16DF057E40AC26D86DF330A57556218925EF13CA1188877BACBF39AB381F77D3960B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JiYuTrainerOldForWinXP.exe

File Explorer

JiYuTrainerOldForWinXP.exe

.exe 4.0MB

JiYuTrainerOldForWinXP.exe

IMPHASH 14ae8454220198729f0b67edf14fe495
SHA256 a74cf0701208990ccd15244bf86e9b5162356f7fbee250c35aee295f223c8105
MD5 14303ec802e12e1086ac4461e7ddfc82
SHA1 5215260c55ddcc446f65d71b1a46bf84aed7754f
SHA512 316f8622a1b6a076c08fa0c0ae4f9e3f35cddff3fc05a1e8176f682ad68126eec9ef42d55c0754bbc13f000cbc38ad2eeff3e24a2328bfdbfeb1d716e94e99fc
SSDEEP 49152:KBsSQIU34fgEPfsd2IazsalOQ2cYnbEInu0GAv5tpdxfKrEUXwGCGkkZ14809VE9:pIU3EPRAalOQwGAxtrIELzfkZ14kn9
TLSH
T19C16DF057E40AC26D86DF330A57556218925EF13CA1188877BACBF39AB381F77D3960B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

299510

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\Programming\WinProjects\JiYuTrainer\Release\JiYuTrainer.pdb

comctl32

InitCommonControlsEx

dbghelp

MiniDumpWriteDump

shlwapi

PathFileExistsW SHDeleteKeyW PathRemoveFileSpecW PathRenameExtensionW

kernel32

SetFileAttributesW CreateMutexW DebugBreak LocalFree GetModuleFileNameW GetCommandLineW ExitProcess DeviceIoControl OutputDebugStringW SetLastError FreeLibrary GetNativeSystemInfo HeapAlloc GetProcessHeap HeapFree lstrlenW GetPrivateProfileStringW WritePrivateProfileStringW WideCharToMultiByte MultiByteToWideChar FormatMessageW VirtualAllocEx WriteProcessMemory CreateRemoteThread WaitForSingleObject GetExitCodeThread VirtualFreeEx GetFileType SetFilePointer ReadFile SystemTimeToFileTime GetCurrentDirectoryW DosDateTimeToFileTime SetFileTime FileTimeToSystemTime FindNextFileW FindClose GlobalAddAtomW CreateThread lstrcpyW TerminateThread FormatMessageA VerSetConditionMask SleepEx VerifyVersionInfoW EnterCriticalSection LeaveCriticalSection CopyFileW DeleteCriticalSection GetTickCount ExpandEnvironmentStringsA WriteFile WaitForMultipleObjects PeekNamedPipe GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExW GetFullPathNameW SetStdHandle FlushFileBuffers GetStringTypeW HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetConsoleCP ReadConsoleW GetConsoleMode GetTimeZoneInformation GetACP FreeLibraryAndExitThread ExitThread SystemTimeToTzSpecificLocalTime GetDriveTypeW SetFilePointerEx GetModuleHandleExW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer RaiseException RtlUnwind InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsProcessorFeaturePresent UnhandledExceptionFilter CreateEventW WaitForSingleObjectEx ResetEvent SetEvent DecodePointer InitializeCriticalSectionAndSpinCount CreateDirectoryW GetTempPathW GetModuleHandleW GetProcAddress SetUnhandledExceptionFilter IsDebuggerPresent SizeofResource LockResource LoadResource FindResourceW Sleep TerminateProcess DeleteFileW GetStdHandle GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLocalTime CreateFileW CloseHandle GetLastError GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA WriteConsoleW SetEndOfFile HeapSize LoadLibraryW InitializeCriticalSection

user32

MoveWindow GetClientRect CreateDialogParamW SetDlgItemTextA GetDlgItemTextW TranslateMessage MessageBoxW MessageBoxTimeoutW FindWindowW IsWindowVisible ShowWindow IsIconic SetForegroundWindow SendMessageW LoadIconW SetDlgItemTextW IsDlgButtonChecked EndDialog DefWindowProcW SendDlgItemMessageW GetDlgItem SendMessageTimeoutW wsprintfW SetWindowsHookExW CloseDesktop UnhookWindowsHookEx OpenDesktopW GetSystemMetrics SetTimer KillTimer MessageBoxIndirectW EnumDesktopWindows SetWindowLongW GetWindowLongW SetWindowPos GetWindowThreadProcessId GetWindowTextW GetWindowRect CallNextHookEx GetWindow GetDesktopWindow CreateWindowExW UpdateWindow LoadCursorW RegisterClassExW CheckDlgButton EnableWindow DestroyWindow DispatchMessageW DialogBoxParamW GetMessageW SetMenuItemBitmaps LoadBitmapW GetSubMenu LoadMenuW RegisterWindowMessageW RegisterHotKey ExitWindowsEx TrackPopupMenu GetCursorPos PostQuitMessage UnregisterHotKey

gdi32

DeleteObject GetStockObject SetTextColor CreateFontW SetBkColor

comdlg32

GetOpenFileNameW

advapi32

CryptDestroyHash CryptImportKey CryptGetHashParam CryptReleaseContext GetTokenInformation AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegQueryValueExW RegOpenKeyExW DeleteService ControlService StartServiceW OpenServiceW CloseServiceHandle CreateServiceW OpenSCManagerW CryptHashData CryptCreateHash CryptEncrypt CryptAcquireContextW CryptDestroyKey

shell32

Shell_NotifyIconW CommandLineToArgvW ShellExecuteW

ws2_32

gethostname accept listen recvfrom sendto WSAStartup freeaddrinfo ioctlsocket __WSAFDIsSet select bind WSAIoctl closesocket WSASetLastError getpeername getsockname socket ntohs connect getsockopt htons setsockopt send recv WSAGetLastError WSACleanup getaddrinfo

wininet

InternetGetConnectedState

wldap32

ord216 ord142 ord41 ord14 ord147 ord79 ord145 ord26 ord127 ord46 ord301 ord133 ord208 ord167 ord118 ord27