1c6643b479614340097a8071c9f880688af5a82db7b6e755beafe7301eea1abf
- SHA256 1c6643b479614340097a8071c9f880688af5a82db7b6e755beafe7301eea1abf
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jfilyg7.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jfilyg7.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
ЗАЯВА-на-отримання-компенсації.lnk
Resource
win7-20240221-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
ЗАЯВА-на-отримання-компенсації.lnk
Resource
win10v2004-20240226-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral5
Sample
ЗАЯВА/3_ЗАЯВА-на-отримання-компенсації-додаткової-зниж.doc
Resource
win7-20240221-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral6
Sample
ЗАЯВА/3_ЗАЯВА-на-отримання-компенсації-додаткової-зниж.doc
Resource
win10v2004-20240226-en
windows10-2004-x64
4 signatures
150 seconds
General
- Target 1c6643b479614340097a8071c9f880688af5a82db7b6e755beafe7301eea1abf
- Size 910KB
- Sample240410-lt91ssed3x
- SHA256 1c6643b479614340097a8071c9f880688af5a82db7b6e755beafe7301eea1abf
- MD5 c0f5dfb2d983db6f8a851640dd40c5c8
- SHA1 335c639f2a43a3c8eaf66d08d4aa2c1e3563b981
- SHA512 b25e6babdc9c1338c43ca7fad17d42dbc91fac1c8320a5738997c4608758274ec6d4a8b08b370c773179f5038befa75118ca618946e4a701040f771e520df9ed
- SSDEEP 6144:UNYLVv8Annhw3I54dDhfZfx6k/ZuCsmK4XShgtf4:0IidDBZflr4
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/jfilyg7.exe
File Explorer
-
1c6643b479614340097a8071c9f880688af5a82db7b6e755beafe7301eea1abf.iso 910KB
-
out.iso.iso 910KB
-
jfilyg7.exe.exe 383KB
-
ЗАЯВА-на-отримання-компенсації.lnk.lnk 411KB
-
ЗАЯВА/3_ЗАЯВА-на-отримання-компенсації-додаткової-знижки-сімям-загиблих2.doc.doc 33KB
out.iso
- SHA256 1c6643b479614340097a8071c9f880688af5a82db7b6e755beafe7301eea1abf
- MD5 c0f5dfb2d983db6f8a851640dd40c5c8
- SHA1 335c639f2a43a3c8eaf66d08d4aa2c1e3563b981
- SHA512 b25e6babdc9c1338c43ca7fad17d42dbc91fac1c8320a5738997c4608758274ec6d4a8b08b370c773179f5038befa75118ca618946e4a701040f771e520df9ed
- SSDEEP 6144:UNYLVv8Annhw3I54dDhfZfx6k/ZuCsmK4XShgtf4:0IidDBZflr4
- MD5 SHA1 SHA512 SSDEEP
jfilyg7.exe
- IMPHASH 45835e5836a57ca7b9b220922dfd7e78
- SHA256 722c36abd195cce70ee25b48d6e64873262e046eae7433976120a1496f01487d
- MD5 96b5dcad2ade88e0c99e84b4869224e7
- SHA1 f23d4988ca9ef6fcf9e219dd249eff9988d5f7c5
- SHA512 8ed9e7fa921b1c75ac6aec5016c138f213b0ff6341d263783d716db530da076794336bc02d6c9b141850d0250bf11b60d0ac401425dbfd13d8904a359284fb85
- SSDEEP 6144:9NYLVv8Annhw3I54dDhfZfx6k/ZuCsmK4XShgtf:tIidDBZflr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5092
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetModuleFileNameA
VirtualProtect
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
vcruntime140
__current_exception
_except_handler4_common
__current_exception_context
memset
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_exit
_get_narrow_winmain_command_line
_controlfp_s
terminate
exit
_initialize_onexit_table
_initterm_e
_cexit
_register_thread_local_exe_atexit_callback
_initialize_narrow_environment
_configure_narrow_argv
_set_app_type
_seh_filter_exe
_c_exit
_crt_atexit
_initterm
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
372KB
Virtual Size
373KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
416B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31328,
count=19, id=261, version=31328,
count=12, id=260, version=31328,
count=1, id=259, version=31328,
count=3, id=257, version=30795,
count=45, id=1, productName=Unmarked objects,
count=1, id=265, version=31332,
count=1, id=255, version=31332,
count=1, id=151,
count=1, id=258, version=31332,
ЗАЯВА-на-отримання-компенсації.lnk
- SHA256 bc4cab14e4b378a7b98185367b4778f92eb4335faba1a4503f4cfb7aba8f13e7
- MD5 c15aa00479cae0a8bae7c926d7fd8ba6
- SHA1 9c7c059e617380eb7bf5b5ae41b2874e2cf5111c
- SHA512 79067ef1afbd879b3ab011354a626e567ebf463fd60f4c5d82c7332906fa4e6c9e85e8d33926cf7c2ed037a7b7eee92a4ce17020450442443740286efa4b2e72
- SSDEEP 24:8y+wj/erlZygbDhw+svWP2+sv30PvcNnCsCcOrAI+/1:8m/6lZWnrPccCssAI
- MD5 SHA1 SHA512 SSDEEP
ЗАЯВА/3_ЗАЯВА-на-отримання-компенсації-додаткової-знижки-сімям-загиблих2.doc
- SHA256 a5a20063c8699c66f5292ed1da7c860360baf6cf2a52f33c2c0b8873a995397c
- MD5 9f194f11b527a774eacd27a033271d88
- SHA1 7878c28a865e582064d5b54e1caf18b4c9bc00d4
- SHA512 6dd9e11d2d0c4bb8ceb851d2d896ff38d26fc045c44641c40ae1a4b0f47123f93f1de42058f2dedb02d73b3c66ef11b281086a427a663289ab8323080964cd26
- SSDEEP 384:xdMX1hEOC3GiyGcSdW+wRsCBItyP3v3zCDqxz99:HNAKCBd3ODqxz99
- MD5 SHA1 SHA512 SSDEEP