fe8d2cfa19992fd6977dfb224fcf3ebeda6573a383a593e8f960616762145f30
- SHA256 fe8d2cfa19992fd6977dfb224fcf3ebeda6573a383a593e8f960616762145f30
Behavioral task
behavioral1
Sample
jFB精良分班软件/jFB.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jFB精良分班软件/jFB.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target fe8d2cfa19992fd6977dfb224fcf3ebeda6573a383a593e8f960616762145f30
- Size 7.9MB
- Sample260728-kjvyfsszhy
- SHA256 fe8d2cfa19992fd6977dfb224fcf3ebeda6573a383a593e8f960616762145f30
- MD5 14524925dfd9a4ecd3510724bd021a18
- SHA1 14a8326c58e09efd75893346ba3381757f2f7c32
- SHA512 af16f952a3f022bc8761ac149b07189f874f8600421035e2cbf4c894a8111d29daaded7cef4fb7fdebcea111db12aef1abc460da2e0729499670c6857fde456b
- SSDEEP 196608:C5BfPCFMcgcuicJ9L9hUio7gJF4Qx/W1mG4bab:4fKFMcf432xEu1mpbab
- TLSH T18B863351F1ECB5B0CC761D86523C48DBA909C294EEE976C280E761ED822C7F62C2F4D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/jFB精良分班软件/jFB.exe aspack_v212_v242 - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/jFB精良分班软件/jFB.exe
File Explorer
-
fe8d2cfa19992fd6977dfb224fcf3ebeda6573a383a593e8f960616762145f30.rar 7.9MB
-
jFB精良分班软件/jFB.exe.exe 7.9MB
jFB精良分班软件/jFB.exe
- SHA256 209db0227c7dceaf34ac429d83f84be0a850c0d0fd36f641c3cde0c47cabf5f8
- MD5 8607ac196e687a07d8ee9f257fbd41bf
- SHA1 a9df3e2eaf540347db2a31280438d68601217fee
- SHA512 25fe15089dc043b4226c3de15abc3bdaccc1e57dc9a9d0e78ce6793bc002dff2df31a71ba9cd329f09505068bf3e5d4259b7c77094940f57b920e8cffe2a8de8
- SSDEEP 196608:/CMWPtem4H+nuR4U5p24J2BrxpuSQtmy/R9N6MluGaQ:lEVURjp2fRunZtu9
- TLSH T1428633066FE4995DDC8ABF311000C5BE43627D9EF3E13F5E64846D0D9F701CABA2A52A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
24383489
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
TMethodImplementationIntercept
Name
.text
Size
4.7MB
Virtual Size
16.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.itext
Size
13KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
66KB
Virtual Size
260KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
137KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
8KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
84B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3.1MB
Virtual Size
4.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
31KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE