Overview
overview
10Static
static
0d701065b5...af.zip
windows7-x64
10d701065b5...af.zip
windows10-2004-x64
1JCTRANS.exe
windows7-x64
10JCTRANS.exe
windows10-2004-x64
101e16a63761...88.zip
windows7-x64
11e16a63761...88.zip
windows10-2004-x64
1c04503d4c4...65.zip
windows7-x64
1c04503d4c4...65.zip
windows10-2004-x64
1d0303a6b69...aa.zip
windows7-x64
1d0303a6b69...aa.zip
windows10-2004-x64
1fe3422ebda...c1.rar
windows7-x64
3fe3422ebda...c1.rar
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
0d701065b55da4f343d25e51f34858c228a8df0a8ce9c76274a92ce8d7fe35af.zip
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0d701065b55da4f343d25e51f34858c228a8df0a8ce9c76274a92ce8d7fe35af.zip
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
JCTRANS.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
JCTRANS.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
1e16a6376135e64593198e07872a0c8d8dfef6e988f11b6ec25c7c56845f6e88.zip
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
1e16a6376135e64593198e07872a0c8d8dfef6e988f11b6ec25c7c56845f6e88.zip
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
c04503d4c4006fd134364506b8a004cd220980304bcbbe3b7fc26dbf9c8dd265.zip
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
c04503d4c4006fd134364506b8a004cd220980304bcbbe3b7fc26dbf9c8dd265.zip
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
d0303a6b69e18f924134871e3c7a0e6815729722f3d49d38476eb2cbf88c92aa.zip
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
d0303a6b69e18f924134871e3c7a0e6815729722f3d49d38476eb2cbf88c92aa.zip
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
fe3422ebda5628f82d457015becbc93ce3594c6df3b0eee29c62b3226b100ec1.rar
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
fe3422ebda5628f82d457015becbc93ce3594c6df3b0eee29c62b3226b100ec1.rar
Resource
win10v2004-20220901-en
General
-
Target
8011686180.zip
-
Size
2.5MB
-
MD5
4816705371e31474c6f7cf9d68057701
-
SHA1
e17e1a91abcc4f56d08c7feb66e38086561fe9d1
-
SHA256
0aa7282999f74574a8a8cd7e1384c724a8c398a1dc871f6fb823f280e8daa442
-
SHA512
352f79697e932cd4d76f2ecad8cba537e284f58981532af64d8682bbbea69eab587b83a81e465e3878fd17d64d90a889559defe914d7af6905d8721c569cbf5e
-
SSDEEP
49152:3jgj+6AUOx1ttOe24LmXyEzePk2cvWY6pSJxi3yyh+0l1JDtZmvBbZpshkuT4d:3lf9x2QEPo3Y6pSJqHjtZiBbvkbMd
Malware Config
Signatures
Files
-
8011686180.zip.zip
Password: infected
-
0d701065b55da4f343d25e51f34858c228a8df0a8ce9c76274a92ce8d7fe35af.zip
-
JCTRANS.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 589KB - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
1e16a6376135e64593198e07872a0c8d8dfef6e988f11b6ec25c7c56845f6e88.zip
-
c04503d4c4006fd134364506b8a004cd220980304bcbbe3b7fc26dbf9c8dd265.zip
-
d0303a6b69e18f924134871e3c7a0e6815729722f3d49d38476eb2cbf88c92aa.zip
-
fe3422ebda5628f82d457015becbc93ce3594c6df3b0eee29c62b3226b100ec1.rar