Overview
overview
7Static
static
7phantomjs-...js.exe
windows7-x64
7phantomjs-...js.exe
windows10-2004-x64
7phantomjs-...nts.js
windows7-x64
1phantomjs-...nts.js
windows10-2004-x64
1phantomjs-...les.js
windows7-x64
1phantomjs-...les.js
windows10-2004-x64
1phantomjs-...eel.js
windows7-x64
1phantomjs-...eel.js
windows10-2004-x64
1phantomjs-...own.js
windows7-x64
1phantomjs-...own.js
windows10-2004-x64
1phantomjs-...iff.js
windows7-x64
1phantomjs-...iff.js
windows10-2004-x64
1phantomjs-...ile.js
windows7-x64
1phantomjs-...ile.js
windows10-2004-x64
1phantomjs-...res.js
windows7-x64
1phantomjs-...res.js
windows10-2004-x64
1phantomjs-...ibo.js
windows7-x64
1phantomjs-...ibo.js
windows10-2004-x64
1phantomjs-...llo.js
windows7-x64
1phantomjs-...llo.js
windows10-2004-x64
1phantomjs-...tme.js
windows7-x64
1phantomjs-...tme.js
windows10-2004-x64
1phantomjs-...eed.js
windows7-x64
1phantomjs-...eed.js
windows10-2004-x64
1phantomjs-...css.js
windows7-x64
1phantomjs-...css.js
windows10-2004-x64
1phantomjs-...izr.js
windows7-x64
1phantomjs-...izr.js
windows10-2004-x64
1phantomjs-...ule.js
windows7-x64
1phantomjs-...ule.js
windows10-2004-x64
1phantomjs-...log.js
windows7-x64
1phantomjs-...log.js
windows10-2004-x64
1Behavioral task
behavioral1
Sample
phantomjs-2.1.1-windows/bin/phantomjs.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
phantomjs-2.1.1-windows/bin/phantomjs.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
phantomjs-2.1.1-windows/examples/arguments.js
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
phantomjs-2.1.1-windows/examples/arguments.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
phantomjs-2.1.1-windows/examples/child_process-examples.js
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
phantomjs-2.1.1-windows/examples/child_process-examples.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
phantomjs-2.1.1-windows/examples/colorwheel.js
Resource
win7-20231025-en
Behavioral task
behavioral8
Sample
phantomjs-2.1.1-windows/examples/colorwheel.js
Resource
win10v2004-20231025-en
Behavioral task
behavioral9
Sample
phantomjs-2.1.1-windows/examples/countdown.js
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
phantomjs-2.1.1-windows/examples/countdown.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
phantomjs-2.1.1-windows/examples/detectsniff.js
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
phantomjs-2.1.1-windows/examples/detectsniff.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
phantomjs-2.1.1-windows/examples/echoToFile.js
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
phantomjs-2.1.1-windows/examples/echoToFile.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
phantomjs-2.1.1-windows/examples/features.js
Resource
win7-20231023-en
Behavioral task
behavioral16
Sample
phantomjs-2.1.1-windows/examples/features.js
Resource
win10v2004-20231025-en
Behavioral task
behavioral17
Sample
phantomjs-2.1.1-windows/examples/fibo.js
Resource
win7-20231023-en
Behavioral task
behavioral18
Sample
phantomjs-2.1.1-windows/examples/fibo.js
Resource
win10v2004-20231025-en
Behavioral task
behavioral19
Sample
phantomjs-2.1.1-windows/examples/hello.js
Resource
win7-20231023-en
Behavioral task
behavioral20
Sample
phantomjs-2.1.1-windows/examples/hello.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
phantomjs-2.1.1-windows/examples/injectme.js
Resource
win7-20231023-en
Behavioral task
behavioral22
Sample
phantomjs-2.1.1-windows/examples/injectme.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
phantomjs-2.1.1-windows/examples/loadspeed.js
Resource
win7-20231023-en
Behavioral task
behavioral24
Sample
phantomjs-2.1.1-windows/examples/loadspeed.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
phantomjs-2.1.1-windows/examples/loadurlwithoutcss.js
Resource
win7-20231020-en
Behavioral task
behavioral26
Sample
phantomjs-2.1.1-windows/examples/loadurlwithoutcss.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral27
Sample
phantomjs-2.1.1-windows/examples/modernizr.js
Resource
win7-20231020-en
Behavioral task
behavioral28
Sample
phantomjs-2.1.1-windows/examples/modernizr.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
phantomjs-2.1.1-windows/examples/module.js
Resource
win7-20231020-en
Behavioral task
behavioral30
Sample
phantomjs-2.1.1-windows/examples/module.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
phantomjs-2.1.1-windows/examples/netlog.js
Resource
win7-20231020-en
Behavioral task
behavioral32
Sample
phantomjs-2.1.1-windows/examples/netlog.js
Resource
win10v2004-20231023-en
General
-
Target
d9fb05623d6b26d3654d008eab3adafd1f6350433dfd16138c46161f42c7dcc8.zip.zip
-
Size
17.3MB
-
MD5
c757b007d5fc1372e90037bd061a4d70
-
SHA1
4d73529974686487534273304a8eb4a530bf781d
-
SHA256
9102005932c871de60afc3d64a2db585e871aafb28d5e833860ce454e8fc5adb
-
SHA512
65de4d37dcad24ce7c4d2fcb9e696261d609a7138b2a97dba7483cf6b23209e218eeac608397c910f6b7c46e0260e64e3bab22e2df4c43a083ddd2d2dcaff3c0
-
SSDEEP
393216:WqfmxoQ12FOghpFyAXvXZdtxb6qIEU/rI84d55+ir+f+p7kT:WqfW512FOghpFX55fpMZ47+f+p7kT
Malware Config
Signatures
-
resource yara_rule static1/unpack002/phantomjs-2.1.1-windows/bin/phantomjs.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/phantomjs-2.1.1-windows/bin/phantomjs.exe
Files
-
d9fb05623d6b26d3654d008eab3adafd1f6350433dfd16138c46161f42c7dcc8.zip.zip.zip
Password: infected
-
d9fb05623d6b26d3654d008eab3adafd1f6350433dfd16138c46161f42c7dcc8.zip.zip
-
phantomjs-2.1.1-windows/ChangeLog
-
phantomjs-2.1.1-windows/LICENSE.BSD
-
phantomjs-2.1.1-windows/README.md
-
phantomjs-2.1.1-windows/bin/phantomjs.exe.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 30.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17.7MB - Virtual size: 17.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
phantomjs-2.1.1-windows/examples/arguments.js.js
-
phantomjs-2.1.1-windows/examples/child_process-examples.js.js
-
phantomjs-2.1.1-windows/examples/colorwheel.js.js
-
phantomjs-2.1.1-windows/examples/countdown.js.js
-
phantomjs-2.1.1-windows/examples/detectsniff.js.js
-
phantomjs-2.1.1-windows/examples/echoToFile.js.js
-
phantomjs-2.1.1-windows/examples/features.js.js
-
phantomjs-2.1.1-windows/examples/fibo.js.js
-
phantomjs-2.1.1-windows/examples/hello.js
-
phantomjs-2.1.1-windows/examples/injectme.js.js
-
phantomjs-2.1.1-windows/examples/loadspeed.js.js
-
phantomjs-2.1.1-windows/examples/loadurlwithoutcss.js.js
-
phantomjs-2.1.1-windows/examples/modernizr.js.js
-
phantomjs-2.1.1-windows/examples/module.js.js
-
phantomjs-2.1.1-windows/examples/netlog.js.js
-
phantomjs-2.1.1-windows/examples/netsniff.js.js
-
phantomjs-2.1.1-windows/examples/openurlwithproxy.js.js
-
phantomjs-2.1.1-windows/examples/outputEncoding.js.js
-
phantomjs-2.1.1-windows/examples/page_events.js.js
-
phantomjs-2.1.1-windows/examples/pagecallback.js.js
-
phantomjs-2.1.1-windows/examples/phantomwebintro.js.js
-
phantomjs-2.1.1-windows/examples/post.js.js
-
phantomjs-2.1.1-windows/examples/postjson.js.js
-
phantomjs-2.1.1-windows/examples/postserver.js.js
-
phantomjs-2.1.1-windows/examples/printenv.js.js
-
phantomjs-2.1.1-windows/examples/printheaderfooter.js.js
-
phantomjs-2.1.1-windows/examples/printmargins.js.js
-
phantomjs-2.1.1-windows/examples/rasterize.js.js
-
phantomjs-2.1.1-windows/examples/render_multi_url.js.js
-
phantomjs-2.1.1-windows/examples/responsive-screenshot.js.js
-
phantomjs-2.1.1-windows/examples/run-jasmine.js.js
-
phantomjs-2.1.1-windows/examples/run-jasmine2.js.js
-
phantomjs-2.1.1-windows/examples/run-qunit.js.js
-
phantomjs-2.1.1-windows/examples/scandir.js.js
-
phantomjs-2.1.1-windows/examples/server.js.js
-
phantomjs-2.1.1-windows/examples/serverkeepalive.js.js
-
phantomjs-2.1.1-windows/examples/simpleserver.js.js
-
phantomjs-2.1.1-windows/examples/sleepsort.js.js
-
phantomjs-2.1.1-windows/examples/stdin-stdout-stderr.js.js
-
phantomjs-2.1.1-windows/examples/universe.js.js
-
phantomjs-2.1.1-windows/examples/unrandomize.js.js
-
phantomjs-2.1.1-windows/examples/useragent.js.js
-
phantomjs-2.1.1-windows/examples/version.js
-
phantomjs-2.1.1-windows/examples/waitfor.js.js
-
phantomjs-2.1.1-windows/examples/walk_through_frames.js.js
-
phantomjs-2.1.1-windows/third-party.txt