C:\Users\Tim\Documents\Visual Studio Stuff\Test\Test\obj\Debug\Test.pdb
Overview
overview
4Static
static
3Monaco/index.html
windows10-1703-x64
4Monaco/main.js
windows10-1703-x64
3Monaco/vs/...ain.js
windows10-1703-x64
3Monaco/vs/...bat.js
windows10-1703-x64
3Monaco/vs/...fee.js
windows10-1703-x64
3Monaco/vs/...cpp.js
windows10-1703-x64
3Monaco/vs/...arp.js
windows10-1703-x64
3Monaco/vs/...csp.js
windows10-1703-x64
3Monaco/vs/...css.js
windows10-1703-x64
3Monaco/vs/...ile.js
windows10-1703-x64
3Monaco/vs/...arp.js
windows10-1703-x64
3Monaco/vs/.../go.js
windows10-1703-x64
3Monaco/vs/...ars.js
windows10-1703-x64
3Monaco/vs/...tml.js
windows10-1703-x64
3Monaco/vs/...ini.js
windows10-1703-x64
3Monaco/vs/...ava.js
windows10-1703-x64
3Monaco/vs/...ess.js
windows10-1703-x64
3Monaco/vs/...lua.js
windows10-1703-x64
3Monaco/vs/...own.js
windows10-1703-x64
3Monaco/vs/...dax.js
windows10-1703-x64
3Monaco/vs/...sql.js
windows10-1703-x64
3Monaco/vs/...e-c.js
windows10-1703-x64
3Monaco/vs/...sql.js
windows10-1703-x64
3Monaco/vs/...php.js
windows10-1703-x64
3Monaco/vs/...ats.js
windows10-1703-x64
3Monaco/vs/...ell.js
windows10-1703-x64
3Monaco/vs/...pug.js
windows10-1703-x64
3Monaco/vs/...hon.js
windows10-1703-x64
3Monaco/vs/...r/r.js
windows10-1703-x64
3Monaco/vs/...zor.js
windows10-1703-x64
3Monaco/vs/...dis.js
windows10-1703-x64
3Monaco/vs/...ift.js
windows10-1703-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Monaco/index.html
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Monaco/main.js
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
Monaco/vs/base/worker/workerMain.js
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Monaco/vs/basic-languages/bat/bat.js
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
Monaco/vs/basic-languages/coffee/coffee.js
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
Monaco/vs/basic-languages/cpp/cpp.js
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
Monaco/vs/basic-languages/csharp/csharp.js
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
Monaco/vs/basic-languages/csp/csp.js
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
Monaco/vs/basic-languages/css/css.js
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
Monaco/vs/basic-languages/dockerfile/dockerfile.js
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
Monaco/vs/basic-languages/fsharp/fsharp.js
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
Monaco/vs/basic-languages/go/go.js
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
Monaco/vs/basic-languages/handlebars/handlebars.js
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
Monaco/vs/basic-languages/html/html.js
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
Monaco/vs/basic-languages/ini/ini.js
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
Monaco/vs/basic-languages/java/java.js
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
Monaco/vs/basic-languages/less/less.js
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
Monaco/vs/basic-languages/lua/lua.js
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
Monaco/vs/basic-languages/markdown/markdown.js
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
Monaco/vs/basic-languages/msdax/msdax.js
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
Monaco/vs/basic-languages/mysql/mysql.js
Resource
win10-20240404-en
Behavioral task
behavioral22
Sample
Monaco/vs/basic-languages/objective-c/objective-c.js
Resource
win10-20240404-en
Behavioral task
behavioral23
Sample
Monaco/vs/basic-languages/pgsql/pgsql.js
Resource
win10-20240404-en
Behavioral task
behavioral24
Sample
Monaco/vs/basic-languages/php/php.js
Resource
win10-20240404-en
Behavioral task
behavioral25
Sample
Monaco/vs/basic-languages/postiats/postiats.js
Resource
win10-20240404-en
Behavioral task
behavioral26
Sample
Monaco/vs/basic-languages/powershell/powershell.js
Resource
win10-20240404-en
Behavioral task
behavioral27
Sample
Monaco/vs/basic-languages/pug/pug.js
Resource
win10-20240404-en
Behavioral task
behavioral28
Sample
Monaco/vs/basic-languages/python/python.js
Resource
win10-20240404-en
Behavioral task
behavioral29
Sample
Monaco/vs/basic-languages/r/r.js
Resource
win10-20240404-en
Behavioral task
behavioral30
Sample
Monaco/vs/basic-languages/razor/razor.js
Resource
win10-20240404-en
Behavioral task
behavioral31
Sample
Monaco/vs/basic-languages/redis/redis.js
Resource
win10-20240404-en
Behavioral task
behavioral32
Sample
Monaco/vs/basic-languages/redshift/redshift.js
Resource
win10-20240404-en
General
-
Target
VoltraBETA.zip
-
Size
1.6MB
-
MD5
08f14ba85d9d0d82c99840ed40c9787d
-
SHA1
597e47d00fcb31309c14c7114bd336b3bb385681
-
SHA256
9c873db52031945f4cb1122b008c0a0f66897494f3ab0c9703c2b5c8f4bbe8f8
-
SHA512
43e0392764787cfc80546d40dbc4650bafb1ebe27113b3a7f850ece220e93ebf0a3931838e4bab657c775a9609192653d1a3367109d48cdc9f2cbe0a7d301788
-
SSDEEP
24576:DRzgV5mczDm9XSS3oxihIChfTU3SuXEn0554jvPzeNLUam0F2lQ5Gk6j7VutEmTv:DRzi9SSiHU3nyZafGki7lmT698
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Voltra.exe
Files
-
VoltraBETA.zip.zip
-
Monaco/desktop.ini
-
Monaco/index.html.html .js polyglot
-
Monaco/main.css
-
Monaco/main.js.js
-
Monaco/vs/base/worker/workerMain.js.js
-
Monaco/vs/basic-languages/bat/bat.js
-
Monaco/vs/basic-languages/coffee/coffee.js
-
Monaco/vs/basic-languages/cpp/cpp.js
-
Monaco/vs/basic-languages/csharp/csharp.js
-
Monaco/vs/basic-languages/csp/csp.js
-
Monaco/vs/basic-languages/css/css.js
-
Monaco/vs/basic-languages/dockerfile/dockerfile.js
-
Monaco/vs/basic-languages/fsharp/fsharp.js
-
Monaco/vs/basic-languages/go/go.js
-
Monaco/vs/basic-languages/handlebars/handlebars.js.js
-
Monaco/vs/basic-languages/html/html.js.js
-
Monaco/vs/basic-languages/ini/ini.js
-
Monaco/vs/basic-languages/java/java.js
-
Monaco/vs/basic-languages/less/less.js
-
Monaco/vs/basic-languages/lua/lua.js
-
Monaco/vs/basic-languages/markdown/markdown.js.js
-
Monaco/vs/basic-languages/msdax/msdax.js
-
Monaco/vs/basic-languages/mysql/mysql.js
-
Monaco/vs/basic-languages/objective-c/objective-c.js
-
Monaco/vs/basic-languages/pgsql/pgsql.js
-
Monaco/vs/basic-languages/php/php.js
-
Monaco/vs/basic-languages/postiats/postiats.js
-
Monaco/vs/basic-languages/powershell/powershell.js
-
Monaco/vs/basic-languages/pug/pug.js
-
Monaco/vs/basic-languages/python/python.js
-
Monaco/vs/basic-languages/r/r.js
-
Monaco/vs/basic-languages/razor/razor.js.js
-
Monaco/vs/basic-languages/redis/redis.js
-
Monaco/vs/basic-languages/redshift/redshift.js
-
Monaco/vs/basic-languages/ruby/ruby.js
-
Monaco/vs/basic-languages/rust/rust.js
-
Monaco/vs/basic-languages/sb/sb.js
-
Monaco/vs/basic-languages/scss/scss.js
-
Monaco/vs/basic-languages/solidity/solidity.js
-
Monaco/vs/basic-languages/sql/sql.js
-
Monaco/vs/basic-languages/st/st.js
-
Monaco/vs/basic-languages/swift/swift.js
-
Monaco/vs/basic-languages/vb/vb.js
-
Monaco/vs/basic-languages/xml/xml.js
-
Monaco/vs/basic-languages/yaml/yaml.js
-
Monaco/vs/editor/contrib/suggest/media/String_16x.svg
-
Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
-
Monaco/vs/editor/editor.main.css
-
Monaco/vs/editor/editor.main.js.js
-
Monaco/vs/editor/editor.main.nls.de.js
-
Monaco/vs/editor/editor.main.nls.es.js
-
Monaco/vs/editor/editor.main.nls.fr.js
-
Monaco/vs/editor/editor.main.nls.it.js
-
Monaco/vs/editor/editor.main.nls.ja.js
-
Monaco/vs/editor/editor.main.nls.js
-
Monaco/vs/editor/editor.main.nls.ko.js
-
Monaco/vs/editor/editor.main.nls.ru.js
-
Monaco/vs/editor/editor.main.nls.zh-cn.js
-
Monaco/vs/editor/editor.main.nls.zh-tw.js
-
Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
-
Monaco/vs/language/css/cssMode.js.js
-
Monaco/vs/language/css/cssWorker.js.js
-
Monaco/vs/language/html/htmlMode.js.js
-
Monaco/vs/language/html/htmlWorker.js.js
-
Monaco/vs/language/json/jsonMode.js.js
-
Monaco/vs/language/json/jsonWorker.js.js
-
Monaco/vs/language/typescript/lib/typescriptServices.js.js
-
Monaco/vs/language/typescript/tsMode.js.js
-
Monaco/vs/language/typescript/tsWorker.js.js
-
Monaco/vs/loader.js.js
-
Voltra.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ