JtBocv[.][.]exe | Triage™

Resubmissions

09/08/2026, 23:34

260809-3kqdgafl5t

09/08/2026, 23:32

260809-3jgpyach975

Sharing

Copy URL Twitter E-mail

General

Target
JtBocv..exe
Size 45.1MB
Sample260809-3jgpyach97
SHA256 97bbed17273704f3393374ebef5dc94de09d86db74265815bb5626a272b0bd27
MD5 503ba7b7fc7c396cc0cfc273d485a525
SHA1 8bbf8c424762bf57e0621de35d3d61af37bfbcf7
SHA512 bf2283a4de78d23f0034ac451665066b058cc16d09a5f4e1786e6d10a9f74d2e3cde54304132b80182d592f66e6e88dc5fe8793c04af49329103c1726bb8d7e4
SSDEEP 786432:s8WaKX4VtXSNgkm2vrP7yvpV6+pdB1923MP4h5rpKSg78Edrmg/Cr1KNV:4bstXoc2L7YVvdJ43gngEBmg/CrmV
TLSH
T147A723DA69D5D1ECC7818534E6491AF9F0C8788A4DBA982BBFC748017630C99CCF9D72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JtBocv..exe

File Explorer

JtBocv..exe

.exe 45.1MB

JtBocv..exe

IMPHASH 41c6d7d1130ab3f6b6348a13f985439c
SHA256 97bbed17273704f3393374ebef5dc94de09d86db74265815bb5626a272b0bd27
MD5 503ba7b7fc7c396cc0cfc273d485a525
SHA1 8bbf8c424762bf57e0621de35d3d61af37bfbcf7
SHA512 bf2283a4de78d23f0034ac451665066b058cc16d09a5f4e1786e6d10a9f74d2e3cde54304132b80182d592f66e6e88dc5fe8793c04af49329103c1726bb8d7e4
SSDEEP 786432:s8WaKX4VtXSNgkm2vrP7yvpV6+pdB1923MP4h5rpKSg78Edrmg/Cr1KNV:4bstXoc2L7YVvdJ43gngEBmg/CrmV
TLSH
T147A723DA69D5D1ECC7818534E6491AF9F0C8788A4DBA982BBFC748017630C99CCF9D72
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

80705888

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wininet

InternetCloseHandle

crypt32

CertOpenStore

advapi32

RegQueryInfoKeyW

user32

GetWindowThreadProcessId

bcrypt

BCryptGenRandom

kernel32

AreFileApisANSI

gdi32

CreateCompatibleDC

shell32

ShellExecuteA

ole32

CoTaskMemFree

oleaut32

SysAllocString

msvcp140

_Wcsxfrm

ntdll

NtQueryInformationThread

netapi32

NetApiBufferFree

sfc

SRSetRestorePointW

vcruntime140

__CxxFrameHandler3

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

_callnewh

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

api-ms-win-crt-runtime-l1-1-0

_errno

api-ms-win-crt-string-l1-1-0

isprint

api-ms-win-crt-convert-l1-1-0

mbstowcs_s

api-ms-win-crt-filesystem-l1-1-0

_wremove

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

log

api-ms-win-crt-conio-l1-1-0

_getch

ws2_32

ioctlsocket

wintrust

WinVerifyTrust

tbs

Tbsi_GetDeviceInfo

setupapi

SetupDiGetClassDevsW

cfgmgr32

CM_Set_DevNode_PropertyW

Name

.text

Size

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

907KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eac0

Size

Virtual Size

34.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.eac1

Size

1024B

Virtual Size

584B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.eac2

Size

45.1MB

Virtual Size

45.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

JtBocv..exe

wininet

crypt32

advapi32

user32

bcrypt

kernel32

gdi32

shell32

ole32

oleaut32

msvcp140

ntdll

netapi32

sfc

vcruntime140

vcruntime140_1

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-conio-l1-1-0

ws2_32

wintrust

tbs

setupapi

cfgmgr32

generic