Behavioral task
behavioral1
Sample
30da1c19c3a87b7c78c8c4059f5483784d42310858637756c3cbb624713bad48.exe
Resource
win7-20220223-en
General
-
Target
30da1c19c3a87b7c78c8c4059f5483784d42310858637756c3cbb624713bad48.bin
-
Size
241KB
-
MD5
ec50d14f4580a0bff42fc5d24d1ab8ec
-
SHA1
114e65e3019411d17d2a8fb61a05e34bdaa3bc73
-
SHA256
30da1c19c3a87b7c78c8c4059f5483784d42310858637756c3cbb624713bad48
-
SHA512
5380231fb5cf762b527837c0379c753fc3b3a73750f516c34a85c9ad0457123ddcbe8749d64b6e698aa07aa0306ed45619b26173f43d8473a0895c4805b39944
Malware Config
Extracted
jester
FikusCode
http://jesterdcuxzbey4xvlwwheoecpltru5be2mzuk4w7a7nrhckdjjhrbyd.onion/report/FikusCode
https://api.anonfiles.com/upload?token=d26d620842507144
46378331-3729-449c-9a03-94f385d10a9c
-
license_key
D1F0DE359CBD562CCF9326AEEEA8E64E
Signatures
-
Jester family
Files
-
30da1c19c3a87b7c78c8c4059f5483784d42310858637756c3cbb624713bad48.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 215KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ