Overview
overview
7Static
static
7iWebAlbum/...p.html
windows7-x64
1iWebAlbum/...p.html
windows10-2004-x64
1iWebAlbum/...ajs.js
windows7-x64
1iWebAlbum/...ajs.js
windows10-2004-x64
1iWebAlbum/..._fx.js
windows7-x64
1iWebAlbum/..._fx.js
windows10-2004-x64
1iWebAlbum/...pts.js
windows7-x64
1iWebAlbum/...pts.js
windows10-2004-x64
1iWebAlbum/...e.html
windows7-x64
1iWebAlbum/...e.html
windows10-2004-x64
1iWebAlbum/...p.html
windows7-x64
1iWebAlbum/...p.html
windows10-2004-x64
1iWebAlbum/...ajs.js
windows7-x64
1iWebAlbum/...ajs.js
windows10-2004-x64
1iWebAlbum/..._fx.js
windows7-x64
1iWebAlbum/..._fx.js
windows10-2004-x64
1iWebAlbum/...pts.js
windows7-x64
1iWebAlbum/...pts.js
windows10-2004-x64
1iWebAlbum/...e.html
windows7-x64
1iWebAlbum/...e.html
windows10-2004-x64
1iWebAlbum/...p.html
windows7-x64
1iWebAlbum/...p.html
windows10-2004-x64
1iWebAlbum/...ajs.js
windows7-x64
1iWebAlbum/...ajs.js
windows10-2004-x64
1iWebAlbum/..._fx.js
windows7-x64
1iWebAlbum/..._fx.js
windows10-2004-x64
1iWebAlbum/...pts.js
windows7-x64
1iWebAlbum/...pts.js
windows10-2004-x64
1iWebAlbum/...e.html
windows7-x64
1iWebAlbum/...e.html
windows10-2004-x64
1iWebAlbum/...p.html
windows7-x64
1iWebAlbum/...p.html
windows10-2004-x64
1Behavioral task
behavioral1
Sample
iWebAlbum/Templetlab/Book-skin/red_style/index_tp.html
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
iWebAlbum/Templetlab/Book-skin/red_style/index_tp.html
Resource
win10v2004-20231025-en
Behavioral task
behavioral3
Sample
iWebAlbum/Templetlab/Book-skin/red_style/res/ajs.js
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
iWebAlbum/Templetlab/Book-skin/red_style/res/ajs.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
iWebAlbum/Templetlab/Book-skin/red_style/res/ajs_fx.js
Resource
win7-20231025-en
Behavioral task
behavioral6
Sample
iWebAlbum/Templetlab/Book-skin/red_style/res/ajs_fx.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
iWebAlbum/Templetlab/Book-skin/red_style/res/gb_scripts.js
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
iWebAlbum/Templetlab/Book-skin/red_style/res/gb_scripts.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
iWebAlbum/Templetlab/Book-skin/red_style/res/loader_frame.html
Resource
win7-20231025-en
Behavioral task
behavioral10
Sample
iWebAlbum/Templetlab/Book-skin/red_style/res/loader_frame.html
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
iWebAlbum/Templetlab/Default-skin/dark_style/index_tp.html
Resource
win7-20231020-en
Behavioral task
behavioral12
Sample
iWebAlbum/Templetlab/Default-skin/dark_style/index_tp.html
Resource
win10v2004-20231025-en
Behavioral task
behavioral13
Sample
iWebAlbum/Templetlab/Default-skin/dark_style/res/ajs.js
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
iWebAlbum/Templetlab/Default-skin/dark_style/res/ajs.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral15
Sample
iWebAlbum/Templetlab/Default-skin/dark_style/res/ajs_fx.js
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
iWebAlbum/Templetlab/Default-skin/dark_style/res/ajs_fx.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
iWebAlbum/Templetlab/Default-skin/dark_style/res/gb_scripts.js
Resource
win7-20231020-en
Behavioral task
behavioral18
Sample
iWebAlbum/Templetlab/Default-skin/dark_style/res/gb_scripts.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
iWebAlbum/Templetlab/Default-skin/dark_style/res/loader_frame.html
Resource
win7-20231025-en
Behavioral task
behavioral20
Sample
iWebAlbum/Templetlab/Default-skin/dark_style/res/loader_frame.html
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
iWebAlbum/Templetlab/Default-skin/grey_style/index_tp.html
Resource
win7-20231023-en
Behavioral task
behavioral22
Sample
iWebAlbum/Templetlab/Default-skin/grey_style/index_tp.html
Resource
win10v2004-20231020-en
Behavioral task
behavioral23
Sample
iWebAlbum/Templetlab/Default-skin/grey_style/res/ajs.js
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
iWebAlbum/Templetlab/Default-skin/grey_style/res/ajs.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral25
Sample
iWebAlbum/Templetlab/Default-skin/grey_style/res/ajs_fx.js
Resource
win7-20231023-en
Behavioral task
behavioral26
Sample
iWebAlbum/Templetlab/Default-skin/grey_style/res/ajs_fx.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral27
Sample
iWebAlbum/Templetlab/Default-skin/grey_style/res/gb_scripts.js
Resource
win7-20231020-en
Behavioral task
behavioral28
Sample
iWebAlbum/Templetlab/Default-skin/grey_style/res/gb_scripts.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral29
Sample
iWebAlbum/Templetlab/Default-skin/grey_style/res/loader_frame.html
Resource
win7-20231023-en
Behavioral task
behavioral30
Sample
iWebAlbum/Templetlab/Default-skin/grey_style/res/loader_frame.html
Resource
win10v2004-20231020-en
Behavioral task
behavioral31
Sample
iWebAlbum/Templetlab/Default-skin/white_style/index_tp.html
Resource
win7-20231023-en
Behavioral task
behavioral32
Sample
iWebAlbum/Templetlab/Default-skin/white_style/index_tp.html
Resource
win10v2004-20231025-en
General
-
Target
8e7e04cc953d841adc7481985e79f91c956547c6ae37a483329c229701842739.zip.zip
-
Size
975KB
-
MD5
f45e5f71d827aa100238fa7409cc7404
-
SHA1
22fd7f14dcbaff5762e3ac7764e9342ae81a06a4
-
SHA256
4a502e4255017a6c3404444f6dc10d28cb122ca42cf0d7b717a56468aac15a6b
-
SHA512
8803f5b33245266d5111e3ad93db34ee903a4eab9dd33837421f6ee27a46388a6594c40e20387494f4b9157cf03ce66cf6c3480f5f7d33300f3a03cf8e21ead1
-
SSDEEP
24576:WAUI8MTN1Jlu02u/NiTOhJfm6B5lTZUFkUZg:bkqN1JbpiOXjlTZUFkmg
Malware Config
Signatures
-
resource yara_rule static1/unpack002/iWebAlbum/iWebAlbum.exe aspack_v212_v242 -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/iWebAlbum/iWebAlbum.exe unpack002/iWebAlbum/unins000.exe
Files
-
8e7e04cc953d841adc7481985e79f91c956547c6ae37a483329c229701842739.zip.zip.zip
Password: infected
-
8e7e04cc953d841adc7481985e79f91c956547c6ae37a483329c229701842739.zip.zip
-
iWebAlbum/Language/How_To_Translate.txt
-
iWebAlbum/Language/language_bs.xml.xml
-
iWebAlbum/Language/language_ca.xml
-
iWebAlbum/Language/language_cz.xml.xml
-
iWebAlbum/Language/language_da.xml.xml
-
iWebAlbum/Language/language_de.xml.xml
-
iWebAlbum/Language/language_en.xml.xml
-
iWebAlbum/Language/language_es.xml
-
iWebAlbum/Language/language_fr.xml
-
iWebAlbum/Language/language_fr2.xml
-
iWebAlbum/Language/language_is.xml
-
iWebAlbum/Language/language_it.xml
-
iWebAlbum/Language/language_nl.xml.xml
-
iWebAlbum/Language/language_pl.xml
-
iWebAlbum/Language/language_pt.xml
-
iWebAlbum/Language/language_pt2.xml
-
iWebAlbum/Language/language_ru.xml
-
iWebAlbum/Language/language_tr.xml
-
iWebAlbum/Language/language_zh-tw.xml
-
iWebAlbum/License.txt
-
iWebAlbum/Readme.txt
-
iWebAlbum/Templetlab/Book-skin/config.xml.xml
-
iWebAlbum/Templetlab/Book-skin/red_style/index_tp.html.html .ps1
-
iWebAlbum/Templetlab/Book-skin/red_style/preview.jpg.jpg
-
iWebAlbum/Templetlab/Book-skin/red_style/res/ajs.js.js
-
iWebAlbum/Templetlab/Book-skin/red_style/res/ajs_fx.js.js
-
iWebAlbum/Templetlab/Book-skin/red_style/res/bookbody.jpg.jpg
-
iWebAlbum/Templetlab/Book-skin/red_style/res/booktop.jpg.jpg
-
iWebAlbum/Templetlab/Book-skin/red_style/res/g_close.gif.gif
-
iWebAlbum/Templetlab/Book-skin/red_style/res/gb_scripts.js.js
-
iWebAlbum/Templetlab/Book-skin/red_style/res/gb_styles.css
-
iWebAlbum/Templetlab/Book-skin/red_style/res/header_bg.gif.gif
-
iWebAlbum/Templetlab/Book-skin/red_style/res/indicator.gif.gif
-
iWebAlbum/Templetlab/Book-skin/red_style/res/loader_frame.html.html .js
-
iWebAlbum/Templetlab/Book-skin/red_style/res/next.gif.gif
-
iWebAlbum/Templetlab/Book-skin/red_style/res/prev.gif.gif
-
iWebAlbum/Templetlab/Book-skin/red_style/res/style.css
-
iWebAlbum/Templetlab/Default-skin/config.xml.xml
-
iWebAlbum/Templetlab/Default-skin/dark_style/index_tp.html.html .ps1
-
iWebAlbum/Templetlab/Default-skin/dark_style/preview.jpg.jpg
-
iWebAlbum/Templetlab/Default-skin/dark_style/res/ajs.js.js
-
iWebAlbum/Templetlab/Default-skin/dark_style/res/ajs_fx.js.js
-
iWebAlbum/Templetlab/Default-skin/dark_style/res/back.gif.gif
-
iWebAlbum/Templetlab/Default-skin/dark_style/res/fotoframe.gif.gif
-
iWebAlbum/Templetlab/Default-skin/dark_style/res/g_close.gif.gif
-
iWebAlbum/Templetlab/Default-skin/dark_style/res/gb_scripts.js.js
-
iWebAlbum/Templetlab/Default-skin/dark_style/res/gb_styles.css
-
iWebAlbum/Templetlab/Default-skin/dark_style/res/header_bg.gif.gif
-
iWebAlbum/Templetlab/Default-skin/dark_style/res/indicator.gif.gif
-
iWebAlbum/Templetlab/Default-skin/dark_style/res/loader_frame.html.html .js
-
iWebAlbum/Templetlab/Default-skin/dark_style/res/next.gif.gif
-
iWebAlbum/Templetlab/Default-skin/dark_style/res/prev.gif.gif
-
iWebAlbum/Templetlab/Default-skin/dark_style/res/style.css
-
iWebAlbum/Templetlab/Default-skin/grey_style/index_tp.html.html .ps1
-
iWebAlbum/Templetlab/Default-skin/grey_style/preview.jpg.jpg
-
iWebAlbum/Templetlab/Default-skin/grey_style/res/ajs.js.js
-
iWebAlbum/Templetlab/Default-skin/grey_style/res/ajs_fx.js.js
-
iWebAlbum/Templetlab/Default-skin/grey_style/res/bg.jpg.jpg
-
iWebAlbum/Templetlab/Default-skin/grey_style/res/bg_slide.gif.gif
-
iWebAlbum/Templetlab/Default-skin/grey_style/res/g_close.gif.gif
-
iWebAlbum/Templetlab/Default-skin/grey_style/res/gb_scripts.js.js
-
iWebAlbum/Templetlab/Default-skin/grey_style/res/gb_styles.css
-
iWebAlbum/Templetlab/Default-skin/grey_style/res/header_bg.gif.gif
-
iWebAlbum/Templetlab/Default-skin/grey_style/res/indicator.gif.gif
-
iWebAlbum/Templetlab/Default-skin/grey_style/res/loader_frame.html.html .js
-
iWebAlbum/Templetlab/Default-skin/grey_style/res/next.gif.gif
-
iWebAlbum/Templetlab/Default-skin/grey_style/res/prev.gif.gif
-
iWebAlbum/Templetlab/Default-skin/grey_style/res/style.css
-
iWebAlbum/Templetlab/Default-skin/white_style/index_tp.html.html .ps1
-
iWebAlbum/Templetlab/Default-skin/white_style/preview.jpg.jpg
-
iWebAlbum/Templetlab/Default-skin/white_style/res/ajs.js.js
-
iWebAlbum/Templetlab/Default-skin/white_style/res/ajs_fx.js.js
-
iWebAlbum/Templetlab/Default-skin/white_style/res/back.gif.gif
-
iWebAlbum/Templetlab/Default-skin/white_style/res/fotoframe.gif.gif
-
iWebAlbum/Templetlab/Default-skin/white_style/res/g_close.gif.gif
-
iWebAlbum/Templetlab/Default-skin/white_style/res/gb_scripts.js.js
-
iWebAlbum/Templetlab/Default-skin/white_style/res/gb_styles.css
-
iWebAlbum/Templetlab/Default-skin/white_style/res/header_bg.gif.gif
-
iWebAlbum/Templetlab/Default-skin/white_style/res/indicator.gif.gif
-
iWebAlbum/Templetlab/Default-skin/white_style/res/loader_frame.html.html .js
-
iWebAlbum/Templetlab/Default-skin/white_style/res/next.gif.gif
-
iWebAlbum/Templetlab/Default-skin/white_style/res/prev.gif.gif
-
iWebAlbum/Templetlab/Default-skin/white_style/res/style.css
-
iWebAlbum/config.xml.xml
-
iWebAlbum/iWebAlbum.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 400KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
iWebAlbum/iWebAlbum.url
-
iWebAlbum/unins000.dat
-
iWebAlbum/unins000.exe.exe windows:1 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 564KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ