jinstall.zip
- SHA256 1ad3f874bc73cbeef494d41d2b170eae0d0f3385e68e4707724d88b46ff92446
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jinstall.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jinstall.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
General
- Target jinstall.zip
- Size 100.6MB
- Sample260701-qlz8vae15k
- SHA256 1ad3f874bc73cbeef494d41d2b170eae0d0f3385e68e4707724d88b46ff92446
- MD5 7f38bc23c555b354a0a82e4bfe989d70
- SHA1 6c8a48c82a73fec886e3a379ab9e47c1fca85e54
- SHA512 df2db6c49295149bc9cb0e2959c232f09d91eb3da10d65c8edd70a51e659e6ffee8b8934c0b9f4d00e5573ad1f3478c86c7cde09254530e45381c6f42ee84479
- SSDEEP 3145728:zPNx8MEmNP/oe5B546Qo06ZlCsynJrKWlrxlgW:7nE+P/D5X42C1/SW
- TLSH T1823833C0BFB49AED6CB17AE82126B70323445DA06634C7FABBA417F335211D6D07964E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/jinstall.exe
File Explorer
-
jinstall.zip.zip 100.6MB
-
jinstall.exe.exe 102.6MB
jinstall.exe
- IMPHASH 9c7364812c930d79da3393d12b0aed31
- SHA256 25ad3d0cfb4233ef3517965a33a3ae07e00b8e4214c42c426fe15ccafc3e45fc
- MD5 0e651c2994ae01483386e5da90856ea8
- SHA1 06501064c03a6cfc208e1a4aa514716c46fec30a
- SHA512 9fc42737b76d1a7d045b6bbf709a7af17433651c19b2dfa5dd45655f5ff135b0ad8a9f2ae9b0394fa66a39d07e60a2745684ab8f333adaa479be5b03fd9a4871
- SSDEEP 3145728:5F5ZaMyf58fyQmjH/C0MRP7nSA+Hpf8YEVbrft:Tr6h8fBmjfCAtE7t
- TLSH T1213833D1FDE8AE85ECB1B5B91822A237323559BCC172C6A3739173E319220F958B454F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4368
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
AdjustTokenPrivileges
GetKernelObjectSecurity
GetSecurityDescriptorControl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorLength
GetSecurityDescriptorOwner
GetSecurityDescriptorSacl
GetUserNameA
IsValidAcl
IsValidSecurityDescriptor
IsValidSid
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
SetKernelObjectSecurity
gdi32
CreateFontIndirectA
DeleteObject
GetDeviceCaps
GetStockObject
SelectObject
kernel32
AddAtomA
CloseHandle
CreateFileA
CreateMutexA
EnterCriticalSection
ExitProcess
FileTimeToLocalFileTime
FindAtomA
GetAtomNameA
GetCommandLineA
GetCurrentProcess
GetDriveTypeA
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetTimeZoneInformation
GetVersion
GetVersionExA
GetVolumeInformationA
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
MulDiv
OpenFile
ReleaseMutex
SetFileAttributesA
SetFileTime
SetUnhandledExceptionFilter
SetVolumeLabelA
VirtualProtect
VirtualQuery
WaitForSingleObject
_lclose
lstrcmpiA
lstrcpynA
lstrlenA
msvcrt
_chdir
_chmod
_close
_getch
_getcwd
_isatty
_lseek
_mkdir
_open
_read
_rmdir
_setmode
_spawnv
_stat
_strdup
_stricmp
_strlwr
_strupr
_unlink
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_access
_assert
_beginthread
_cexit
_endthread
_findclose
_findfirst
_findnext
_iob
_isctype
_onexit
_pctype
_setmode
abort
asctime
atexit
exit
fclose
fflush
fgets
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
getenv
localtime
malloc
memcpy
putc
remove
signal
sprintf
strcat
strchr
strcmp
strcpy
strncmp
strncpy
strrchr
strstr
time
tolower
shell32
ShellExecuteA
user32
CharToOemA
CreateDialogParamA
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
GetDC
GetDlgItem
GetMessageA
GetParent
GetSystemMetrics
GetWindowRect
IsDialogMessageA
KillTimer
LoadCursorA
LoadIconA
MessageBoxA
OemToCharA
PostMessageA
PostQuitMessage
RegisterClassA
ReleaseDC
SetFocus
SetTimer
SetWindowPos
TranslateMessage
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/4
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/19
Size
512B
Virtual Size
171B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/35
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/47
Size
1024B
Virtual Size
642B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/61
Size
512B
Virtual Size
443B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/73
Size
512B
Virtual Size
116B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/86
Size
512B
Virtual Size
397B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
Name
/97
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE