Behavioral task
behavioral1
Sample
jxt/Bindok.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
jxt/Bindok.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
jxt/JxtUpgrade.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
jxt/JxtUpgrade.exe
Resource
win10v2004-20220812-en
General
-
Target
4c93fc93dd9ae80e38406a5649d2f6cfdec32ad2149098ec32648d340a7b32a9
-
Size
3.4MB
-
MD5
d5abffb3f58854313c2fa537930041e0
-
SHA1
a3bcfaa84c4ab0916d1f9721d13ed0948f8d7f50
-
SHA256
4c93fc93dd9ae80e38406a5649d2f6cfdec32ad2149098ec32648d340a7b32a9
-
SHA512
8ae67817c3dd0f3d6507e548640447c6c0536137a455dae7d64fc61a88317d69210950823a5e12b64699910f98f513191bf4069139714d3898e831d22ae5cbdb
-
SSDEEP
49152:ulIn2yVTrQU4Po/bNjHVzppguFdZnAnvdRdokkqwcIOtcExISvM+cEd:uW2ydQdoTNjHVDguFdJo9HkUtJM+dd
Malware Config
Signatures
-
resource yara_rule static1/unpack001/jxt/JxtUpgrade.exe aspack_v212_v242
Files
-
4c93fc93dd9ae80e38406a5649d2f6cfdec32ad2149098ec32648d340a7b32a9.rar
-
jxt/Bindok.exe.exe windows x86
2f3c5da38e687ed8e68cd2b55dbd54f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
Sections
xicheng! Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
jxt/Config/吉祥天伐木标准配置.jxt
-
jxt/Config/吉祥天挖矿标准配置.jxt
-
jxt/Config/吉祥天捡垃圾标准配置.jxt
-
jxt/Config/吉祥天武士标准配置-35级.jxt
-
jxt/Config/吉祥天法师标准配置-35级.jxt
-
jxt/Config/吉祥天道士标准配置-35级.jxt
-
jxt/Data/BDAnswer.txt
-
jxt/Data/BindItem.txt
-
jxt/Data/BuyGoods.txt
-
jxt/Data/CharModels.dat
-
jxt/Data/DefAnswer.txt
-
jxt/Data/DoorNode.txt
-
jxt/Data/EventWords.txt
-
jxt/Data/F
-
jxt/Data/Fi
-
jxt/Data/FileList.ini
-
jxt/Data/HomeTown.txt
-
jxt/Data/HomeTownNPC.txt
-
jxt/Data/ItemDef.txt
-
jxt/Data/KillNode.txt
-
jxt/Data/MapSite.txt
-
jxt/Data/Monster.txt
-
jxt/Data/NPC.txt
-
jxt/Data/NumModels.dat
-
jxt/Data/OtherParam.txt
-
jxt/Data/PlayerDef.txt
-
jxt/Data/Purchase.txt
-
jxt/Data/SDQuestion.txt
-
jxt/Data/SFItemMap.txt
-
jxt/Data/Skills.txt
-
jxt/Data/TradeDialog.txt
-
jxt/Data/TrsfNPC.txt
-
jxt/FlyWoool.ini
-
jxt/Flyinit.ini
-
jxt/JxtUpgrade.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 129KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 18KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
jxt/group.dat
-
jxt/map/0-3d.jxb
-
jxt/map/0.jxb
-
jxt/map/1-3d.jxb
-
jxt/map/1.jxb
-
jxt/map/10-3d.jxb
-
jxt/map/10.jxb
-
jxt/map/100.jxb
-
jxt/map/128.jxb
-
jxt/map/14.jxb
-
jxt/map/16.jxb
-
jxt/map/18.jxb
-
jxt/map/2-3d.jxb
-
jxt/map/2.jxb
-
jxt/map/20.jxb
-
jxt/map/3-3d.jxb
-
jxt/map/3.jxb
-
jxt/map/4-3d.jxb
-
jxt/map/4.jxb
-
jxt/map/5.jxb
-
jxt/map/6.jxb
-
jxt/map/7.jxb
-
jxt/map/88000.jxb
-
jxt/map/88003.jxb
-
jxt/map/88005.jxb
-
jxt/map/88007.jxb
-
jxt/map/88J006.jxb
-
jxt/map/88J013.jxb
-
jxt/map/A001.jxb
-
jxt/map/A002.jxb
-
jxt/map/ARENA001.jxb
-
jxt/map/AY002.jxb
-
jxt/map/BT006.jxb
-
jxt/map/BX001.jxb
-
jxt/map/BX021.jxb
-
jxt/map/BX052.jxb
-
jxt/map/BX072.jxb
-
jxt/map/CG001.jxb
-
jxt/map/CG002.jxb
-
jxt/map/CG003.jxb
-
jxt/map/DK001.jxb
-
jxt/map/DV012.jxb
-
jxt/map/DV023.jxb
-
jxt/map/DV026.jxb
-
jxt/map/E001.jxb
-
jxt/map/E002.jxb
-
jxt/map/E003.jxb
-
jxt/map/E004.jxb
-
jxt/map/F001.jxb
-
jxt/map/F002.jxb
-
jxt/map/F003.jxb
-
jxt/map/F004.jxb
-
jxt/map/F005.jxb
-
jxt/map/F008.jxb
-
jxt/map/F0081.jxb
-
jxt/map/F009.jxb
-
jxt/map/F011.jxb
-
jxt/map/F012.jxb
-
jxt/map/F013.jxb
-
jxt/map/F014.jxb
-
jxt/map/F015.jxb
-
jxt/map/F016.jxb
-
jxt/map/F017.jxb
-
jxt/map/F018.jxb
-
jxt/map/F019.jxb
-
jxt/map/F020.jxb
-
jxt/map/F021.jxb
-
jxt/map/F022.jxb
-
jxt/map/F023.jxb
-
jxt/map/F024.jxb
-
jxt/map/G001.jxb
-
jxt/map/H071.jxb
-
jxt/map/H072.jxb
-
jxt/map/H073.jxb
-
jxt/map/H074.jxb
-
jxt/map/H081.jxb
-
jxt/map/H082.jxb
-
jxt/map/H083.jxb
-
jxt/map/H084.jxb
-
jxt/map/H085.jxb
-
jxt/map/H086.jxb
-
jxt/map/HD001.jxb
-
jxt/map/J001.jxb
-
jxt/map/J002.jxb
-
jxt/map/J003.jxb
-
jxt/map/J004.jxb
-
jxt/map/J005.jxb
-
jxt/map/J006.jxb
-
jxt/map/J007.jxb
-
jxt/map/J008.jxb
-
jxt/map/J009.jxb
-
jxt/map/J010.jxb
-
jxt/map/J011.jxb
-
jxt/map/J012.jxb
-
jxt/map/L001.jxb
-
jxt/map/L003.jxb
-
jxt/map/L004.jxb
-
jxt/map/L005.jxb
-
jxt/map/L006.jxb
-
jxt/map/L007.jxb
-
jxt/map/L008.jxb
-
jxt/map/L009.jxb
-
jxt/map/L010.jxb
-
jxt/map/LK001.jxb
-
jxt/map/M001.jxb
-
jxt/map/M002.jxb
-
jxt/map/M003.jxb
-
jxt/map/M004.jxb
-
jxt/map/M005.jxb
-
jxt/map/M006.jxb
-
jxt/map/M007.jxb
-
jxt/map/M008.jxb
-
jxt/map/M009.jxb
-
jxt/map/M010.jxb
-
jxt/map/M011.jxb
-
jxt/map/M012.jxb
-
jxt/map/M013.jxb
-
jxt/map/M014.jxb
-
jxt/map/M015.jxb
-
jxt/map/M016.jxb
-
jxt/map/M017.jxb
-
jxt/map/M018.jxb
-
jxt/map/M020.jxb
-
jxt/map/M021.jxb
-
jxt/map/M022.jxb
-
jxt/map/M023.jxb
-
jxt/map/M024.jxb
-
jxt/map/M025.jxb
-
jxt/map/M026.jxb
-
jxt/map/M027.jxb
-
jxt/map/M028.jxb
-
jxt/map/M029.jxb
-
jxt/map/M030.jxb
-
jxt/map/M031.jxb
-
jxt/map/M032.jxb
-
jxt/map/MC001.jxb
-
jxt/map/MC002.jxb
-
jxt/map/MC003.jxb
-
jxt/map/MC004.jxb
-
jxt/map/MC005.jxb
-
jxt/map/MC006.jxb
-
jxt/map/MC007.jxb
-
jxt/map/MC008.jxb
-
jxt/map/MC009.jxb
-
jxt/map/MC010.jxb
-
jxt/map/MC011.jxb
-
jxt/map/MG001.jxb
-
jxt/map/MG002.jxb
-
jxt/map/as001.jxb
-
jxt/map/as002.jxb
-
jxt/map/as003.jxb
-
jxt/map/as004.jxb
-
jxt/map/bt001.jxb
-
jxt/map/bt002.jxb
-
jxt/map/bt003.jxb
-
jxt/map/bt004.jxb
-
jxt/map/bt005.jxb
-
jxt/map/dv001.jxb
-
jxt/map/dv011.jxb
-
jxt/map/dv022.jxb
-
jxt/map/dz001.jxb
-
jxt/map/herofight001.jxb
-
jxt/map/jd001.jxb
-
jxt/map/l013.jxb
-
jxt/map/lv001.jxb
-
jxt/map/maplist.txt
-
jxt/map/mh001.jxb
-
jxt/map/mh002.jxb
-
jxt/map/mh003.jxb
-
jxt/map/mh004.jxb
-
jxt/map/mh005.jxb
-
jxt/map/mh006.jxb
-
jxt/map/mh007.jxb
-
jxt/map/mh008.jxb
-
jxt/map/mh009.jxb
-
jxt/map/mh010.jxb
-
jxt/map/mh011.jxb
-
jxt/map/mh012.jxb
-
jxt/map/mh013.jxb
-
jxt/map/mh014.jxb
-
jxt/map/mh015.jxb
-
jxt/map/mh016.jxb
-
jxt/map/mh017.jxb
-
jxt/map/mh018.jxb
-
jxt/map/mh019.jxb
-
jxt/map/mh020.jxb
-
jxt/map/mh021.jxb