C:\Users\hp\Desktop\aries perm src\Spoofer\obj\Release\1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Jinx.exe
Resource
win7-20240704-en
General
-
Target
Jinx.exe
-
Size
3.2MB
-
MD5
5f850b8709599d9285d4434a180f488c
-
SHA1
d521b40d8f02ebc8343a591fbd116c10a7fb8b77
-
SHA256
a006c75ed2d13812a654d935aea6cefb184cfffc3946ad11a928f80784ba927f
-
SHA512
e045d777baeb711e50cdb00f0b2690fa0347b41d83a3a16675ad7193df9810a293a22b02bfe8a1ccc84059bb518f963aa82db0d0b20ffcd8f07400297ae6ac57
-
SSDEEP
98304:6MXB/EKyIT4bNJFY3OqtuU+KH4kpc+DX/0H:6MSfjBHYevKYOD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Jinx.exe
Files
-
Jinx.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ