jannes[.]exe | Triage

Resubmissions

14/10/2024, 11:12

241014-na2lesydjr 3

14/10/2024, 10:01

241014-l2a7fatclh 3

Sharing

Copy URL Twitter E-mail

General

Target

jannes.exe
Size

14.7MB
MD5

0bb098f2831316d182f7e43ca1d9dbe8
SHA1

117cb4e983a3aa0f152890c40550ab2bb22bbe33
SHA256

2fb1a6da7bbf5e725f34fa878dbe6e5d983f4e7ec7c1c52e056a27265299f0b3
SHA512

7986bfc94c8ba8af1c937877972a6b712cdd16e049daee03044bc2d728113579b7da63d682f662729421e9f8e3e2af1d0907bd9fe01a13c3b40b242a21d6db16
SSDEEP

393216:gSe2zza4AeG1Krxe41dpwRyYEAxlnYE6k:w2DAeVrxD5Yyj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jannes.exe

Files

jannes.exe
.exe windows:6 windows x64 arch:x64

7549bf58d0ec9d975544c6239a35915b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

QueryPerformanceFrequency
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

TrackMouseEvent

gdi32

GetDeviceCaps

advapi32

CreateProcessAsUserW

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

msvcp140

?_Winerror_map@std@@YAHH@Z

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

winmm

PlaySoundA

imm32

ImmGetContext

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy

api-ms-win-crt-heap-l1-1-0

_callnewh

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-runtime-l1-1-0

_c_exit

api-ms-win-crt-filesystem-l1-1-0

_stat64i32

api-ms-win-crt-convert-l1-1-0

strtoull

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

api-ms-win-crt-math-l1-1-0

roundf

api-ms-win-crt-time-l1-1-0

_ctime64_s

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-utility-l1-1-0

rand

Sections

.text
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.phalp0
Size: - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.phalp1
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.phalp2
Size: 14.7MB - Virtual size: 14.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

7549bf58d0ec9d975544c6239a35915b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

urlmon

msvcp140

d3d11

d3dcompiler_47

dwmapi

winmm

imm32

d3dx11_43

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

Sections

.text Size: - Virtual size: 2.1MB

.rdata Size: - Virtual size: 528KB

.data Size: - Virtual size: 2.7MB

.pdata Size: - Virtual size: 133KB

.msvcjmc Size: - Virtual size: 11KB

.phalp0 Size: - Virtual size: 7.8MB

.phalp1 Size: 5KB - Virtual size: 4KB

.phalp2 Size: 14.7MB - Virtual size: 14.7MB

.rsrc Size: 512B - Virtual size: 480B

.text
Size: - Virtual size: 2.1MB

.rdata
Size: - Virtual size: 528KB

.data
Size: - Virtual size: 2.7MB

.pdata
Size: - Virtual size: 133KB

.msvcjmc
Size: - Virtual size: 11KB

.phalp0
Size: - Virtual size: 7.8MB

.phalp1
Size: 5KB - Virtual size: 4KB

.phalp2
Size: 14.7MB - Virtual size: 14.7MB

.rsrc
Size: 512B - Virtual size: 480B