jollibees-phase-2-1[.]81[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
jollibees-phase-2-1.81.exe
Size 576.3MB
Sample260930-cyldkavyfz
SHA256 32403cf4092d12e0220859fb0a15be7ac01392b54908b4203cac2557f9e8cfb5
MD5 88e7721bccc7128269b275fd9249d1dc
SHA1 4f9a2ba528720250adce9debd0ceeb32b725e7af
SHA512 af617c8026e503a5aaaac684dfad51ed7dbb9cd22f36f550fd3cd907c2f3791f0c7942ad29a87144bef484838edaa4798607de5745080c0639a0edeb98ffa66e
SSDEEP 6291456:luvmtWxikul2tmKg0IAHkUo7ohbTFgiM+7ARVS:HURor0LHkULdgiM+MW
TLSH
T1EF592291C7C88923F272F43BC5B31D3BC25BADC42A57250EC5243A157DB7BA49B223A5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jollibees-phase-2-1.81.exe

File Explorer

jollibees-phase-2-1.81.exe

.exe 576.3MB

jollibees-phase-2-1.81.exe

IMPHASH cdf2338385bbf26ec9ce2289fc7f2d64
SHA256 32403cf4092d12e0220859fb0a15be7ac01392b54908b4203cac2557f9e8cfb5
MD5 88e7721bccc7128269b275fd9249d1dc
SHA1 4f9a2ba528720250adce9debd0ceeb32b725e7af
SHA512 af617c8026e503a5aaaac684dfad51ed7dbb9cd22f36f550fd3cd907c2f3791f0c7942ad29a87144bef484838edaa4798607de5745080c0639a0edeb98ffa66e
SSDEEP 6291456:luvmtWxikul2tmKg0IAHkUo7ohbTFgiM+7ARVS:HURor0LHkULdgiM+MW
TLSH
T1EF592291C7C88923F272F43BC5B31D3BC25BADC42A57250EC5243A157DB7BA49B223A5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

489257

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

winmm

timeBeginPeriod joyGetDevCapsW joyGetPosEx timeEndPeriod

kernel32

GetTempFileNameW GlobalAddAtomW GlobalDeleteAtom GetModuleHandleW lstrlenW GetLocaleInfoA LockResource VirtualProtect VirtualQuery SetLastError LoadResource SizeofResource FindResourceA FindResourceW IsBadReadPtr IsBadWritePtr FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA FindNextFileA FindFirstFileExA GetProcessHeap DecodePointer GetFileType LCMapStringW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetOEMCP IsValidCodePage GetStringTypeW GetCPInfo HeapFree GlobalFree HeapAlloc GetStdHandle GetModuleFileNameA GetModuleHandleExW ExitProcess HeapSize HeapCompact SetEnvironmentVariableW DeleteFileW GetACP LoadLibraryExW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer RtlUnwind InitializeSListHead GetCurrentProcessId GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount QueryPerformanceFrequency QueryPerformanceCounter LoadLibraryExA GetSystemInfo RaiseException FileTimeToSystemTime FileTimeToLocalFileTime GetSystemTime GetVersion GetTempPathW FindClose FindNextFileW FindFirstFileW GetCurrentDirectoryW SetErrorMode GlobalUnlock GlobalLock GlobalAlloc GetExitCodeProcess GetCommandLineW WideCharToMultiByte Sleep SetCurrentDirectoryW CreateDirectoryW CloseHandle SetFilePointer WriteFile GetLastError ReadFile CreateFileW GetCurrentThreadId RemoveDirectoryW GetVersionExW GetModuleFileNameW WriteConsoleW GetLocaleInfoW MultiByteToWideChar FreeLibrary GetProcAddress LoadLibraryW SetStdHandle GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers HeapReAlloc

user32

SystemParametersInfoW DrawEdge DrawTextW PostQuitMessage IntersectRect SetRect DrawFocusRect InvertRect CreateDialogParamA CreateDialogParamW CreateDialogIndirectParamA CreateDialogIndirectParamW DialogBoxParamA DialogBoxIndirectParamA DialogBoxIndirectParamW LoadMenuA LoadMenuW LoadStringA SetLastErrorEx GetTabbedTextExtentW GetUpdateRect IsIconic DefMDIChildProcW SetDlgItemTextW EndPaint BeginPaint PtInRect GetDlgItem MapVirtualKeyW ModifyMenuW GetDlgItemTextW EndDialog DrawMenuBar DestroyMenu LoadMenuIndirectW GetMenuItemCount SetWindowPlacement GetWindowPlacement GetFocus CallWindowProcW RemovePropW SetPropW GetPropW UnionRect DestroyWindow SetScrollPos SetScrollRange CreateWindowExW GetParent EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetFocus GetSysColor GetDesktopWindow RedrawWindow GetSystemMenu UpdateWindow SetWindowLongW MessageBoxW GetMenuStringW GetMenuItemID GetInputState FillRect LoadStringW DialogBoxParamW RegisterClassW RegisterClassExW LoadImageW LoadIconW GetWindow GetClassNameW GetTopWindow GetMonitorInfoW MonitorFromWindow GetSystemMetrics OemToCharA GetAsyncKeyState GetActiveWindow ShowCursor SetCapture ReleaseCapture GetKeyState GetWindowRect MapWindowPoints SetWindowPos IsZoomed GetWindowLongW AdjustWindowRectEx SendMessageW LockWindowUpdate IsWindowVisible GetClientRect SetWindowTextW IsDialogMessageW SetTimer GetClipboardData CloseClipboard SetClipboardData EmptyClipboard OpenClipboard IsClipboardFormatAvailable wsprintfW ShowWindow PostMessageW CheckMenuItem EnableMenuItem GetMenu InvalidateRect SetCursorPos ClientToScreen ScreenToClient GetCursorPos GetKeyboardState CopyRect UnhookWindowsHookEx KillTimer SetWindowsHookExW CallNextHookEx DestroyIcon GetSubMenu DeleteMenu GetMenuState LoadCursorW SetCursor ReleaseDC CreateIconIndirect GetDC MsgWaitForMultipleObjects DispatchMessageW TranslateMessage TranslateMDISysAccel GetMessageW PeekMessageW SendDlgItemMessageW

gdi32

CreatePalette GetDeviceCaps SelectPalette RealizePalette GetObjectW CreateFontIndirectW CreatePen Rectangle SelectObject MoveToEx LineTo CreateSolidBrush GetStockObject SetTextColor SetBkMode DeleteObject GetClipRgn ExcludeClipRect SelectClipRgn GetTextExtentPointW GetCharWidthW DPtoLP SetTextAlign SetROP2 LPtoDP SetBkColor Polygon TextOutW SetPolyFillMode GetTextMetricsW GetNearestPaletteIndex CreateHatchBrush SetDIBits CreateCompatibleBitmap CreateRectRgn CreateBitmap

comdlg32

GetSaveFileNameW GetOpenFileNameW

shell32

ShellExecuteExW DragAcceptFiles DragQueryFileW