jstatd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
56a7bacf4a2eb6a0fc104e7f6128b54b42cab9b6f3b43fb00de36bd3b4b4e069.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
56a7bacf4a2eb6a0fc104e7f6128b54b42cab9b6f3b43fb00de36bd3b4b4e069.exe
Resource
win10v2004-20240802-en
General
-
Target
56a7bacf4a2eb6a0fc104e7f6128b54b42cab9b6f3b43fb00de36bd3b4b4e069
-
Size
11KB
-
MD5
38575d227470a0ad9a240a394b037b88
-
SHA1
551adf886f35636403255f5fbbfd808f03922056
-
SHA256
56a7bacf4a2eb6a0fc104e7f6128b54b42cab9b6f3b43fb00de36bd3b4b4e069
-
SHA512
2f334f2811b88970b2be98e7547e1609259a03f11a579dac3bec673065501fef68b6e84aedcffaab37ac4eb7918a04442af846d63191fe3c457665b4f91a4f85
-
SSDEEP
192:QhTrKGZPWE5zmrKWJ4rLJa8E7jOZ12POjMx82J5pz6M30a5A+4V:uTrKgP9zKfJ4rLJaFj81Kb82n3F5Av
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56a7bacf4a2eb6a0fc104e7f6128b54b42cab9b6f3b43fb00de36bd3b4b4e069
Files
-
56a7bacf4a2eb6a0fc104e7f6128b54b42cab9b6f3b43fb00de36bd3b4b4e069.exe windows:6 windows x86 arch:x86
78e03d1f9beef54a63592911439791b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
jli
_JLI_InitArgProcessing@8
_JLI_GetStdArgc@0
_JLI_CmdToArgs@4
_JLI_GetStdArgs@0
_JLI_Launch@56
_JLI_MemAlloc@4
kernel32
InitializeSListHead
GetModuleHandleW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
IsDebuggerPresent
GetCurrentProcess
vcruntime140
_except_handler4_common
__current_exception
memset
__current_exception_context
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
_set_fmode
__stdio_common_vfprintf
__p__commode
api-ms-win-crt-runtime-l1-1-0
__p___argc
_controlfp_s
_crt_atexit
_seh_filter_exe
_set_app_type
__p___argv
terminate
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_register_onexit_function
_initialize_onexit_table
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Exports
Exports
main
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ