RJ01[.]img | Triage

Submit
Reports

Overview

overview

Static

static

RJ01.iso

windows7-x64

3

RJ01.iso

windows10-2004-x64

3

SK.js

windows7-x64

SK.js

windows10-2004-x64

manacle/hapless.dll

windows7-x64

manacle/hapless.dll

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

RJ01.iso

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

RJ01.iso

Resource

win10v2004-20220901-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

SK.js

Resource

win7-20221111-en

qakbot bb06 1668752705 banker stealer trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

SK.js

Resource

win10v2004-20221111-en

qakbot bb06 1668752705 banker stealer trojan

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral5

Sample

manacle/hapless.dll

Resource

win7-20221111-en

qakbot bb06 1668752705 banker stealer trojan

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

manacle/hapless.dll

Resource

win10v2004-20220812-en

qakbot bb06 1668752705 banker stealer trojan

windows10-2004-x64

4 signatures

150 seconds

General

Target

RJ01.img
Size

842KB
MD5

0d156ab0973c1461a467b305264bc7e4
SHA1

b953b509d35f5c909774ec88db5920e68364792a
SHA256

87a6c8d93a46da3487e69372704f9014a55ab43820d202b3bf58f28df1fa2bac
SHA512

d76ae5bbce41e2a2febd8de5d394b4c9a2b8275f261722b6daa7ed54d024c844db8a650adb7a7e234698f66cf580f8c6ae7c97d26a36e81994a197c147b6f967
SSDEEP

24576:PNJK8zWcCTiRQsC3bpWbYGQajBp6Pi1YWaw4:vK8Ix3bUbzQaNpx1Da

Score

N/A

Malware Config

Signatures

Files

RJ01.img
.iso .vbs
SK.js
.js .vbs
data.txt
manacle/hapless.temp
.dll regsvr32 windows x86

b121f840f8c504d34a3856981e588e27

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateFileA
FindClose
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetFileSize
GetFileType
ReadFile
CloseHandle
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateThread
GetCurrentThreadId
OpenThread
SuspendThread
MapViewOfFile
GetModuleFileNameA
CreateFileMappingA
CreateNamedPipeA
WaitNamedPipeA

Exports

Exports

DllRegisterServer

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
manacle/hinged.txt
manacle/unquestioningly.txt

© 2018-2024

Terms | Privacy