jaffacakes118_59f8bf634562795a0ae5ab628e360585b4f0599efbb2ce3927d8474fbe681164.bin
- SHA256 59f8bf634562795a0ae5ab628e360585b4f0599efbb2ce3927d8474fbe681164
Overview
overview
7Static
static
7jsdata/JSHJ.dll
windows10-2004-x64
3jsdata/JSHJ.dll
windows11-ltsc_2024-x64
3jsdata/WinIo.dll
windows10-2004-x64
3jsdata/WinIo.dll
windows11-ltsc_2024-x64
3jsdata/WinIo.sys
windows10-2004-x64
3jsdata/WinIo.sys
windows11-ltsc_2024-x64
3jsdata/fx.exe
windows10-2004-x64
3jsdata/fx.exe
windows11-ltsc_2024-x64
3jsdata/js.exe
windows10-2004-x64
6jsdata/js.exe
windows11-ltsc_2024-x64
6jsdata/jsy.exe
windows10-2004-x64
3jsdata/jsy.exe
windows11-ltsc_2024-x64
3jsq.exe
windows10-2004-x64
3jsq.exe
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
jsdata/JSHJ.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jsdata/JSHJ.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
jsdata/WinIo.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
jsdata/WinIo.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
jsdata/WinIo.sys
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
jsdata/WinIo.sys
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
jsdata/fx.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
jsdata/fx.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
jsdata/js.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
18 signatures
150 seconds
Behavioral task
behavioral10
Sample
jsdata/js.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
16 signatures
150 seconds
Behavioral task
behavioral11
Sample
jsdata/jsy.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
jsdata/jsy.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
jsq.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
jsq.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target jaffacakes118_59f8bf634562795a0ae5ab628e360585b4f0599efbb2ce3927d8474fbe681164.bin
- Size 1.9MB
- Sample260925-xda3bagh73
- SHA256 59f8bf634562795a0ae5ab628e360585b4f0599efbb2ce3927d8474fbe681164
- MD5 6dd8cc581395622abe5fdad29e7cec33
- SHA1 30a70a7325529dddb593b54896d3f5e57a258e89
- SHA512 6d3b9a60f4a4c44c3ca0e9e62858842c5c03212e45dd20bd79be0071837b8722f80b2160f4ab41118e89dd2623d8784cd550c5f50d641d8e8bb6beca0f501af4
- SSDEEP 49152:DLn9w+ly+qmL4n2eTbIX2LdEMoOv1235dVleEWsOx4tsXEi:u+2DIXwnhI5zl+sHC
- TLSH T1C19533B25C4FC22CF2001A7ADA259805F796256F3D35F3562ABC833D3F5108A5B6768E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/jsdata/jsy.ucu aspack_v212_v242 static1/unpack001/jsq.exe aspack_v212_v242 - Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
resource unpack001/jsdata/JSHJ.dll unpack001/jsdata/WinIo.dll unpack001/jsdata/WinIo.sys unpack001/jsdata/fx.ucu unpack001/jsdata/js.ucu unpack001/jsdata/jsy.ucu unpack001/jsq.exe
File Explorer
-
jaffacakes118_59f8bf634562795a0ae5ab628e360585b4f0599efbb2ce3927d8474fbe681164.bin.zip 1.9MB
-
jsdata/JSHJ.dll.dll 63KB
-
jsdata/WinIo.dll.dll 48KB
-
jsdata/WinIo.sys.sys 4KB
-
jsdata/WinIo.vxd5KB
-
jsdata/fx.ucu.exe 764KB
-
jsdata/js.ucu.exe 764KB
-
jsdata/jsy.ucu.exe 193KB
-
jsdata/sl.ucu57B
-
jsdata/sr.ucu7B
-
jsq.exe.exe 216KB
jsdata/JSHJ.dll
- IMPHASH c900ad8678c0d52b90b76a074e12704b
- SHA256 dcd37cc4b182fb08ee1bd0040e8770461eddf53f0496ade65d8102f67dfe6f51
- MD5 c70b20f201c284f61913308d35db5d17
- SHA1 37941c7df20c6d69193fea6e5165f99dc605179d
- SHA512 679456b6795939ccf7ea8edd0dd6b5956be6ab3096eabcaa9aa14f092f6f7fb2abe526ec999b11c0f65fdaf5c7373d5cd6e406ae6693786fe03336d131943b77
- SSDEEP 1536:NjeNReoa4hqepyavkggRnRPD7F5k14G8GlUFeC:NjeNba4hqeD2D7fk/UFeC
- TLSH T13B538F12BD90C031F09084F0693E5737EA3FAA240756966B97D4A9ECCEF1550FE0A36B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4252
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
imagehlp
ImageDirectoryEntryToData
kernel32
CloseHandle
CreateFileA
CreateToolhelp32Snapshot
DeleteFileA
ExitProcess
FileTimeToSystemTime
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTime
GetThreadPriority
GetTickCount
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapFree
IsBadCodePtr
LCMapStringA
LoadLibraryA
Module32First
Module32Next
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetPriorityClass
SetThreadPriority
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
lstrcmpiA
user32
CallNextHookEx
EnumThreadWindows
FindWindowA
GetWindowLongA
MessageBoxA
SetTimer
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
winmm
timeGetSystemTime
timeSetEvent
@@Jshj@Finalize
@@Jshj@Initialize
Hook_KB
UnHook_KB
___CPPdebugHook
Name
.text
Size
42KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
jsdata/WinIo.dll
- IMPHASH b9b2bee901bb36181f387e1e336faa1f
- SHA256 d2eb2a40174b9adb3abc768af7fa80882cd1e2ad22303fe4448db89509ac392b
- MD5 6d113aa35a8c79b236751e4ccf2b7751
- SHA1 b4ac97768512acd31e4a824b6595ec2163db7972
- SHA512 f83209d9e98395ae6127f247b7f68167708c1af789a332695feed0f7879d8a83405eed3c3e860e482cebc704a613563bcadfaa8a2986e348d85e50a2e0b3fb68
- SSDEEP 384:XPgsb8J2hTBC6nE5Ig7p+lAK37l6ape8cMAp3XynYHlwouJC6+p8oyx8rd:XPLhTBC6E5gAK3p618sXhHlwodL8oyW
- TLSH T161235B4279C201F3D24F427455F6AB37AA7F7A201BE588879BA56E891C721F0E53A303
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6208
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateFileA
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
DeviceIoControl
GetEnvironmentVariableA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
advapi32
ControlService
CloseServiceHandle
OpenSCManagerA
CreateServiceA
StartServiceA
OpenServiceA
DeleteService
GetPhysLong
GetPortVal
InitializeWinIo
InstallWinIoDriver
MapPhysToLin
RemoveWinIoDriver
SetPhysLong
SetPortVal
ShutdownWinIo
UnmapPhysicalMemory
Name
.text
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, version=8047,
count=21, id=14, version=7299,
count=57, id=10, version=8047,
count=5, id=19, version=8034,
count=75, id=1, productName=Unmarked objects,
count=1, id=10, version=8966,
count=4, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
jsdata/WinIo.sys
- IMPHASH 172b54da983eaa27abf08d8ed525b840
- SHA256 e665441a0968e7ee6eb246c4b984ff7449d7905890e55e07f251464d60191a6d
- MD5 7e5a7cf19504af7ddaf4fa36261940d1
- SHA1 baac4c3ce5a46a73dbfbe98c8d89489d04e488a7
- SHA512 d1b226f50a079e2ed40ab5c04098fa11466b914568ba350ea23c0781c37f960e9003ff0ceada80f5c5455ec4dddcd9b44614e667bb774f3a7e12e33052c9498a
- SSDEEP 96:VsXktSPyUFouQWu5GQt3RnP3tzCEKsomeL28L1:2XuHIC7tPeL
- TLSH T127A182301796AD17C5C1027AA586133170BAF881376F9B2B20BC64378FDD3EE691530A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
836
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
ntoskrnl.exe
RtlInitUnicodeString
IoCreateDevice
MmAllocateNonCachedMemory
MmFreeNonCachedMemory
Ke386SetIoAccessMap
IoCreateSymbolicLink
IofCompleteRequest
Ke386IoSetAccessProcess
IoDeleteSymbolicLink
ZwClose
ZwMapViewOfSection
ObReferenceObjectByHandle
ZwOpenSection
ZwUnmapViewOfSection
IoDeleteDevice
IoGetCurrentProcess
hal
HalTranslateBusAddress
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
32B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
INIT
Size
544B
Virtual Size
536B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
128B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, productName=Unmarked objects (old),
count=1, id=10, version=8966,
jsdata/WinIo.vxd
- SHA256 f849acfbd18def13f6a3d53268ee31b7ae904b2e7b66b9ccbb9f17c359f23173
- MD5 7a5af5dd62c4bc97c1654790e8d2f307
- SHA1 d90af8fa0da44b6b010b7c3d0fa8d03a71737e91
- SHA512 ea7435347f063df5ded4fe4d721317bf1115862f6c270eaa6563b17cae56900dad92ab68c45b2db3cdd9d3f39bf57c513475322162afc9581f55ea5c8cdcd439
- SSDEEP 24:eH1GSzWQm8EqEZADBIukl9pzdxvdgi1JjMAnEaLfNm:yA8EPZA8FzdxVXvzEiVm
- TLSH T19EB154D6D35978D7C09E633B02F36B902B30EA0007C3CF97E48494A90E756485F292E4
- MD5 SHA1 SHA512 SSDEEP TLSH
jsdata/fx.ucu
- SHA256 4d8b5ab87a43e60ce3e78293b296016fc3c31b4951b6ba80abe1d2e857ad0339
- MD5 2b537771b996a3c60d3d51459b80fa11
- SHA1 aa42f278d4f65c69b40824b8938adca06bb7430b
- SHA512 796e07ac4144e947af21f3df8069d6cb273078528d001cb440d6d89e021bc0aa29114aaac3b72a4241d556ac9c1e98c5e58bc6dfd867da7fce243ca2b28b4c63
- SSDEEP 12288:uws4gSJi0t9M+5m5/qoT9gsKYSh8qbcWnNihbJr1d1qdoBBhlBZRbjHWe6zvy88R:v+MMR1tZIR9NkbBHu2BhpFWqv9bT
- TLSH T15CF4234EB65DDD9BF4D18CB23FAA4165861E7E0B3D4F3B2F0139935E08F0A209897985
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2403840
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
Name
Size
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
755KB
Virtual Size
756KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
jsdata/js.ucu
- SHA256 7247b507f7a90a92456b2d4ddd2b61051311e6fe3570833d03a7a4657c5291c2
- MD5 63793d8830e92aff657d92c564f7f480
- SHA1 55c2fda9f361bd8999aca39b2b6ccbe40ffd65fb
- SHA512 05dffa592fabcc230634a8700d17d861c9884669231be3aba950897f43519c9641196a8beb41d3ca7541afb33498a548d3e0a03976efd150a192ddba22015813
- SSDEEP 12288:tUMGwXpGUi+J6TfOeMuPqHzx8vfQNabt9SkYJAN2Q5lO56Hv7+8QfB3sFTf9tc8i:WMGwZGUi+JteYxGINISkUANk5cyjlqrb
- TLSH T1E1F42322AB8B2DCBE5D40870137BE7D8C33D661C7DCD6A372618E90E26F9AD11CD1985
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2394768
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
Name
Size
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
755KB
Virtual Size
756KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
7KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
jsdata/jsy.ucu
- SHA256 b8919c6e659e3b3a71f245ccbcce00497f00274d41ff854a3201a797e1f151b0
- MD5 34bebf7fa949ac69be6d03db71a355a6
- SHA1 9020bb95c09e8ce387c3b8cee36609a08c4b0bae
- SHA512 ad97249ba437afd9eb248b88ec36216c0f9ef77bf6ce784e1c2255b7d68f5cfabf66d356efd77efce4a63527a5ef21824c04c2f1473a2149f51a0454607babe5
- SSDEEP 6144:iXFsgXoxwszyukNt1SINWNHuU4CEMyJi5NF:GFy7yukNtsiUIMyo
- TLSH T1171412277B59AB98C08594BF4B851950B3BCC8A326C5C3072CB4133F2C972A9DF5EB95
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
532481
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
170KB
Virtual Size
416KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
DATA
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
10KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
jsdata/sl.ucu
- SHA256 9be7be5474d42d895d78874d9d37f9a1dbbd1610ffe3b3f0c4eedeb0af6bd885
- MD5 9ad34cc4f8d0a46f4bf082759db741f1
- SHA1 99811778b5bab81f3856f2368309c44901d5a9b9
- SHA512 01b5e54b454d223a42c405b00664b840f44b4df9b6c7c4851d4625748d95b968dca96e29e4f1a2e3162e11dfb57d15318a1b67c696ed2c79e3cdd87bb5eef3c1
- TLSH T19A90020B411B5284565708AA76D58D11B10091702112088791273D725C5D642FD71427
- MD5 SHA1 SHA512 TLSH
jsdata/sr.ucu
- SHA256 d6fba2fd908e7d46061734ce77b8642374c92afcb5a70b3c5664e17e12439de9
- MD5 5d76c6206a8188f531b43cd3b867859e
- SHA1 22000a42a78f1365dc5df79f78cb4a8cc2360498
- SHA512 a48898e815003ee39bbba371a1faa22ab002a8744eb2e689af6d63276529e728734811fdee27e859846cf0b13990e8fbb5d67bb3a8f6d36093d3b116ca8f5476
- MD5 SHA1 SHA512
jsq.exe
- SHA256 ea9f8b10e3c4e849ed8504b80a0b9554d7d45b46b5aa3684bfebe929656ec439
- MD5 4cd9d5386dd6dbb618add33664eeb1e3
- SHA1 e5703b870208207d4281dd73d2011c48a3c50a59
- SHA512 01d2f789bbd15e71c30a8ca1fcdc3a7b078e9451016afeb9dcbb64704a773e7127031846db1b595216c92807e5a0c29b3213f5ae44b722ad932f46c5e3db5db7
- SSDEEP 6144:+HOc/lpRsmFA+Ia+zIzsfzna5Vc+6A0E:+HzNnsJ+mwVD6
- TLSH T1302412AA4C959EEAD05523769D442D73C3ACC908F5E88F63C7E440AD2E252313ED1BD5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
598017
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
191KB
Virtual Size
476KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
DATA
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
11KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE