c:\d8evl1xj9zy\obj\Release\QQf.pdb
Overview
overview
5Static
static
3Main/Main/Main.exe
windows7-x64
5Main/Main/Main.exe
windows10-2004-x64
5Main/Main/...40.dll
windows7-x64
1Main/Main/...40.dll
windows10-2004-x64
1reddit-fee...dex.js
windows7-x64
3reddit-fee...dex.js
windows10-2004-x64
3reddit-fee...dex.js
windows7-x64
3reddit-fee...dex.js
windows10-2004-x64
3reddit-fee...dex.js
windows7-x64
3reddit-fee...dex.js
windows10-2004-x64
3reddit-fee...dex.js
windows7-x64
3reddit-fee...dex.js
windows10-2004-x64
3reddit-fee...dex.js
windows7-x64
3reddit-fee...dex.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Main/Main/Main.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Main/Main/Main.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Main/Main/dll/vcruntime40.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Main/Main/dll/vcruntime40.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
reddit-feed/2b2t/index.js
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
reddit-feed/2b2t/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
reddit-feed/2b2t_Uncensored/index.js
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
reddit-feed/2b2t_Uncensored/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
reddit-feed/MinecraftExploits/index.js
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
reddit-feed/MinecraftExploits/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
reddit-feed/SalC1/index.js
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
reddit-feed/SalC1/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
reddit-feed/minecraftclients/index.js
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
reddit-feed/minecraftclients/index.js
Resource
win10v2004-20240802-en
General
-
Target
b5c5e171517c04152f9d2b2872032fd0.zip
-
Size
323KB
-
MD5
b5c5e171517c04152f9d2b2872032fd0
-
SHA1
87be5a3b43647f0579d047fbc9337e33a163fd61
-
SHA256
cbd4954960f9318a6a1401c670917e725c702088c01cb18dd43d3e021a6617cf
-
SHA512
5e2f3c61d9f0e36e017e5cc78ebc2768bfcb883a60c78b1b86d5ac335184f3aa1b5b3fd70ca7ab04cb3b777d28acc59951b7f0a7d181ef8941c5d1fb67486c5a
-
SSDEEP
6144:hzpVmc8Qut1O5OI/7SxdyaNxC6LIza7SORbzk7EgG474E4g4w4iB2:nVLmwUIjSmw89za7L9kXG474E4g4w4i2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Main/Main/Main.exe
Files
-
b5c5e171517c04152f9d2b2872032fd0.zip.zip
-
Main/Main/Instruction.txt
-
Main/Main/Main.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 274KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Main/Main/dll/vcruntime40.dll
-
reddit-feed/2b2t/.env
-
reddit-feed/2b2t/.gitattributes
-
reddit-feed/2b2t/.gitignore
-
reddit-feed/2b2t/README.md
-
reddit-feed/2b2t/index.js.js
-
reddit-feed/2b2t/package-lock.json
-
reddit-feed/2b2t/package.json
-
reddit-feed/2b2t_Uncensored/.env
-
reddit-feed/2b2t_Uncensored/.gitattributes
-
reddit-feed/2b2t_Uncensored/.gitignore
-
reddit-feed/2b2t_Uncensored/README.md
-
reddit-feed/2b2t_Uncensored/index.js.js
-
reddit-feed/2b2t_Uncensored/package-lock.json
-
reddit-feed/2b2t_Uncensored/package.json
-
reddit-feed/MinecraftExploits/.env
-
reddit-feed/MinecraftExploits/.gitattributes
-
reddit-feed/MinecraftExploits/.gitignore
-
reddit-feed/MinecraftExploits/README.md
-
reddit-feed/MinecraftExploits/index.js.js
-
reddit-feed/MinecraftExploits/package-lock.json
-
reddit-feed/MinecraftExploits/package.json
-
reddit-feed/SalC1/.env
-
reddit-feed/SalC1/.gitattributes
-
reddit-feed/SalC1/.gitignore
-
reddit-feed/SalC1/README.md
-
reddit-feed/SalC1/index.js.js
-
reddit-feed/SalC1/package-lock.json
-
reddit-feed/SalC1/package.json
-
reddit-feed/last.dat
-
reddit-feed/minecraftclients/.env
-
reddit-feed/minecraftclients/.gitattributes
-
reddit-feed/minecraftclients/.gitignore
-
reddit-feed/minecraftclients/README.md
-
reddit-feed/minecraftclients/index.js.js
-
reddit-feed/minecraftclients/package-lock.json
-
reddit-feed/minecraftclients/package.json