Static task
static1
Behavioral task
behavioral1
Sample
JABIL10934.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
JABIL10934.exe
Resource
win10v2004-20230915-en
General
-
Target
16102023_2203_16102023_JABIL10934.rar
-
Size
607KB
-
MD5
086c03d37a473c990d98aec0a7c1d419
-
SHA1
19e143a4847c7f86538e18f3c3e4844347bf6694
-
SHA256
5aa44581c04f3bf936307d391ef576a56363b17b9143581f0db7a3a73d6d4cb1
-
SHA512
f2b564f1a3c523e69cbeebc6edc2a91d95c27e5683604c5aab80e69273379b9dd003bb3ef977045006b816d412f00e037bd852f53300b3f0ecbf551c44a665bc
-
SSDEEP
12288:aVNt0j9GgJB93hvfFL0D0y4sv3GWvBjRs1l15yrqlumo/8xOdGA5FM46I:abG0KBTf9G0xEv9G1Z4R/8xOBrM0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/JABIL10934.exe
Files
-
16102023_2203_16102023_JABIL10934.rar.rar
Password: infected
-
JABIL10934.exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 644KB - Virtual size: 643KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ