Static task
static1
Behavioral task
behavioral1
Sample
VBRUN300.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
VBRUN300.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
cprobe.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
cprobe.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
jnrzloader.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
jnrzloader.exe
Resource
win10v2004-20231215-en
General
-
Target
7f2a7c4a9d17fbe00528d5c5504d0778
-
Size
249KB
-
MD5
7f2a7c4a9d17fbe00528d5c5504d0778
-
SHA1
74e9e35f0dd14dc50d4f75b06e40b49eacee7d58
-
SHA256
e874af801edcab91cb6b608db8d4d40b5962aeb9bd804b4ab212d528672bb55a
-
SHA512
c4025a4f1bc9cadd6a0be6a6dd3b0acdbbde7a0a6189b32e1cf37ae14692d88f263d8a04ef362456ca54064274422796860a72a81e1480f72be42ee9845c7c29
-
SSDEEP
6144:sYPByj7YHuckkCSRWXldqBxjSsCztEYKilHTpvW+JX:bPGACSMXrWxGRvFXX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/jnrzloader.exe
Files
-
7f2a7c4a9d17fbe00528d5c5504d0778.zip
-
VBRUN300.DLL
-
cmdialog.vbx
-
cprobe.exe
-
jnrzloader.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE