C:\Documents and Settings\Hebrew\My Documents\Visual Studio 2008\Projects\Stub\Stub\obj\Release\Stub.pdb
Overview
overview
8Static
static
3abone.js
windows7-x64
1abone.js
windows10-2004-x64
1begen.js
windows7-x64
1begen.js
windows10-2004-x64
1engel.js
windows7-x64
1engel.js
windows10-2004-x64
1facebookhile.exe
windows7-x64
8facebookhile.exe
windows10-2004-x64
8oyun.js
windows7-x64
1oyun.js
windows10-2004-x64
1zoomin.html
windows7-x64
1zoomin.html
windows10-2004-x64
1zoomout.html
windows7-x64
1zoomout.html
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
abone.js
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
abone.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
begen.js
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
begen.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
engel.js
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
engel.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
facebookhile.exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
facebookhile.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
oyun.js
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
oyun.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
zoomin.html
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
zoomin.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
zoomout.html
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
zoomout.html
Resource
win10v2004-20231215-en
General
-
Target
80155c9b737a760941178fc4a9b84fc0
-
Size
332KB
-
MD5
80155c9b737a760941178fc4a9b84fc0
-
SHA1
ededd58e3363a03b50cdb27e0305608177cf21d2
-
SHA256
3d0997eae18e31f62a9ca5dbdc86ac7df6a01035cb01be6b3538df220d4976e6
-
SHA512
fa0a19cdb980f903e8e4ef26d867c3851f18583ade2ef978e6c8e94dea5eb6eba4255f58486fa719276a71c97348ce55a2fc4ed131dc2b8e2d2136ab2cb2b74c
-
SSDEEP
6144:gs0ujKGFwPrnr/Gm78qu9W0iyvDlfg/3Nbzc/lsMV:gs0uWGY/Gm78iYxfgvNbYd9V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/facebookhile.exe
Files
-
80155c9b737a760941178fc4a9b84fc0.rar
-
abone.php.js
-
begen.php.js
-
bilgileri gir.txt
-
css/coda-slider.css
-
css/logo.png.png
-
css/no.png.png
-
css/ok.png.png
-
css/style.css
-
engel.php.js
-
facebookhile.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 157B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ibonet.jpg.jpg
-
images/ajax-loader.gif.gif
-
images/arkaplan.png.png
-
images/buton.png.png
-
images/facebook.png.png
-
images/flickr.png.png
-
images/input.png.png
-
images/myspace.png.png
-
images/onebit_08.png.png
-
images/onebit_11.png.png
-
images/onebit_12.png.png
-
images/onebit_17.png.png
-
images/onebit_21.png.png
-
images/readmore.png.png
-
images/templatemo-list.png.png
-
images/templatemo_content_bg.jpg.jpg
-
images/templatemo_content_bg_wrapper.jpg.jpg
-
images/templatemo_footer_bg.jpg.jpg
-
images/templatemo_hor_divider.jpg.jpg
-
images/templatemo_image_01.jpg.jpg
-
images/templatemo_image_02.jpg.jpg
-
images/templatemo_image_03.jpg.jpg
-
images/templatemo_image_04.jpg.jpg
-
images/templatemo_image_05.jpg.jpg
-
images/templatemo_image_06.jpg.jpg
-
images/templatemo_logo.png.png
-
images/templatemo_menu_divider.jpg.jpg
-
images/templatemo_menu_hover.jpg.jpg
-
images/templatemo_menu_hover.png.png
-
images/templatemo_site_title_bg.jpg.jpg
-
images/twitter.png.png
-
images/youtube.png.png
-
kullanımı.txt
-
oyun.php.js
-
zoomin.cur.html
-
zoomout.cur.html