Resubmissions

02-04-2024 18:02

240402-wmv86shb83 7

02-04-2024 17:49

240402-wd8g5sgh3s 7

General

  • Target

    JIGUtility_V2.0.8.0_20230112.zip.7z

  • Size

    14.1MB

  • MD5

    6893edd1cddbd7739012c17982ec8001

  • SHA1

    fa5373f9f94a5108b298a7c09e665cc89138b70a

  • SHA256

    3c5e0085adfb6d60d77aa3b3f4a8cf2e3beb1139de69d1f921c6e1017da16a9f

  • SHA512

    add8768abe8ce1a3e2d5a36f5efd280df30751058c348e81ed4d888277cc95ed9a0609d876b824a20bf5e14158db94b649397dd36f8520ece9377d9bc3a4aa7b

  • SSDEEP

    393216:EJBXLLyRfK6WUZUCvZW6Ir6adMoGkEbdAJEkeaZI:EJFyJnvZW6IrlTl2dDj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • JIGUtility_V2.0.8.0_20230112.zip.7z
    .7z

    Password: infected

  • JIGUtility_V2.0.8.0_20230112.zip
    .zip

    Password: infected

  • JIGUtility_V2.0.8.0_20230112/ASUS JIG Board User Manual V6.2.pdf
    .pdf

    Password: infected

  • JIGUtility_V2.0.8.0_20230112/ASUS JIG Board User Manual V6.2_ODM_CSC.pdf
    .pdf

    Password: infected

  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/ASUSEPS.cmd
    .cmd .vbs
  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/ASUSFLS.cmd
    .cmd .vbs
  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/ASUSR_ParsingRecord.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected

    38490e8ae989be72e447792474644397


    Headers

    Imports

    Exports

    Sections

  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/ASUSR_ParsingRecord_Test_SOP.pdf
    .pdf

    Password: infected

  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/ASUS_WNECT.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    7eee839e70bbbfbf74bb918cb647945e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/ASUS_WNECT.lua
  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/ASUS_WNECT.lua.signed
  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/ATSZIO64.sys
    .sys windows:6 windows x64 arch:x64

    b19743993dc7f1d48b2a86fe9b9c91e3


    Code Sign

    Headers

    Imports

    Sections

  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/BiosPostErrorCode.ini
  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/EcPlatform.ini
  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/PwrSequenceErrorCode.ini
  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    f9d79b04c8bf9b79f0b0966b56dfa6ca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    c5f156d056c33464eb23dd13e24291cb


    Headers

    Imports

    Exports

    Sections

  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/Readme.txt
  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/encryptlog.dll
    .dll windows:4 windows x86 arch:x86

    9e72e637359ecdf9a98ecd0dea858a53


    Headers

    Imports

    Exports

    Sections

  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/run.bat
  • JIGUtility_V2.0.8.0_20230112/JIGUtility_V2.0.8.0.exe
    .exe windows:6 windows x86 arch:x86

    37f1eb4b421a4ba2b9b7f32fe0093cbe


    Headers

    Imports

    Sections

  • JIGUtility_V2.0.8.0_20230112/Save&FlashGPNV.pdf
    .pdf
  • JIGUtility_V2.0.8.0_20230112/readme.txt