jester | 4417195f416e6bd019c0982978bf1f00c0c848e5ac2e020f278629bbe21266b6[.]bin

Sharing

Copy URL

Twitter E-mail

General

Target

4417195f416e6bd019c0982978bf1f00c0c848e5ac2e020f278629bbe21266b6.bin
Size

494KB
MD5

d01656def63636c082785db6d61fb415
SHA1

96102ea313063db1179792d65cd15af877d2f5d0
SHA256

4417195f416e6bd019c0982978bf1f00c0c848e5ac2e020f278629bbe21266b6
SHA512

1e27c2b2bacac3e6b9994c4de8bef20d9af1b783d668cfa8896bc7822c739e969dba64db0629a245398a0bb324575f1009bca6e51fbf0701fe1dea798d68edc7

Score

10^/10

ads555man jester

Malware Config

Extracted

Family

jester

Botnet

ads555man

http://jesterdcuxzbey4xvlwwheoecpltru5be2mzuk4w7a7nrhckdjjhrbyd.onion/report/ads555man

https://api.anonfiles.com/upload?token=d26d620842507144

Mutex

efbb42d7-d0db-4f16-a194-3d9d9d1fc654

Attributes

license_key
65EEBAF23D4744267D131CD5BA37E706

Signatures

Jester family
jester

Files

4417195f416e6bd019c0982978bf1f00c0c848e5ac2e020f278629bbe21266b6.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:29

Not After

02-12-2021 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

53:d6:0a:5d:a5:1c:38:40:a3:8d:6c:29:7b:42:ca:10:29:ed:4d:9b:82:33:7e:50:94:46:35:3a:6b:80:a2:9a
Signer

Actual PE Digest

53:d6:0a:5d:a5:1c:38:40:a3:8d:6c:29:7b:42:ca:10:29:ed:4d:9b:82:33:7e:50:94:46:35:3a:6b:80:a2:9a

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

10-03-2022 13:59
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Extracted

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:edCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

53:d6:0a:5d:a5:1c:38:40:a3:8d:6c:29:7b:42:ca:10:29:ed:4d:9b:82:33:7e:50:94:46:35:3a:6b:80:a2:9aSigner

Signature Validations

Verification

10-03-2022 13:59 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 217KB - Virtual size: 216KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

53:d6:0a:5d:a5:1c:38:40:a3:8d:6c:29:7b:42:ca:10:29:ed:4d:9b:82:33:7e:50:94:46:35:3a:6b:80:a2:9a
Signer

10-03-2022 13:59
Valid: false

.text
Size: 217KB - Virtual size: 216KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 512B - Virtual size: 12B