Behavioral task
behavioral1
Sample
Electron.zip
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Electron.zip
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Electron/JITStarter.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Electron/JITStarter.exe
Resource
win10v2004-20220812-en
General
-
Target
Electron.zip
-
Size
3.3MB
-
MD5
166c1a5bb0f6477ac5f2a33d9081ba4c
-
SHA1
b7ebc255946b48555d682c42d41fa53a6763f4ce
-
SHA256
f16d599d4c2a38ba03bf3a81dbda53a04109ec0743d7d3d7182f18deb93a073b
-
SHA512
a14f3e707aabf780e2cf9d9b968cd3cdb5530ddb5fdc68b0b63ddd20f15d8a14aa869aed91fb0c74cc0440c09133af33f4b2445b8d6a2722b1100c9aff692592
-
SSDEEP
98304:iXy7ul5Nhcx15nij2w8EDpHtNZPPMcXLqFqKk62CnaV49LL:iUuT3M5iqJslT7qEjNnV2L
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Electron/JITStarter.exe themida
Files
-
Electron.zip.zip
-
Electron/JITStarter.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 307KB - Virtual size: 632KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 51KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
-
Electron/README_IMPORTANT.txt