OjarLangForBat.zip
- SHA256 1faed13e7dd312c5e142dedd215b3a7e5701459ecab19c947b418f70446ac20b
Overview
overview
3Static
static
3OjarLangFo...ar.exe
windows10-2004-x64
3OjarLangFo...ar.exe
windows11-ltsc_2024-x64
3OjarLangFo...om.bat
windows10-2004-x64
3OjarLangFo...om.bat
windows11-ltsc_2024-x64
3OjarLangFo...or.exe
windows10-2004-x64
3OjarLangFo...or.exe
windows11-ltsc_2024-x64
3OjarLangFo...ler.py
ubuntu-18.04-amd64
1OjarLangFo...ler.py
debian-9-armhf
1OjarLangFo...ler.py
debian-9-mips
1OjarLangFo...ler.py
debian-9-mipsel
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OjarLangForBat/ojar.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
OjarLangForBat/ojar.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
OjarLangForBat/other/src/bin/1d/Don't see/BIN/com.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
OjarLangForBat/other/src/bin/1d/Don't see/BIN/com.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
OjarLangForBat/other/src/bin/1d/Don't see/BIN/editor.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
OjarLangForBat/other/src/bin/1d/Don't see/BIN/editor.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
OjarLangForBat/other/src/bin/1d/Don't see/SRC/ojar_compiler.py
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
OjarLangForBat/other/src/bin/1d/Don't see/SRC/ojar_compiler.py
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
OjarLangForBat/other/src/bin/1d/Don't see/SRC/ojar_compiler.py
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
OjarLangForBat/other/src/bin/1d/Don't see/SRC/ojar_compiler.py
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
General
- Target OjarLangForBat.zip
- Size 88KB
- Sample261012-226lcaby2m
- SHA256 1faed13e7dd312c5e142dedd215b3a7e5701459ecab19c947b418f70446ac20b
- MD5 7a32718dfaca9c3ded9f4d3cd1905d41
- SHA1 391c2caa1b3aab9dfecf826e14ac9dd1a94348a4
- SHA512 f4afbdb408132e8a3a6ace724f67f65e85fdd16f5bb5a9f425a036526ae049aea1f9468283065efa417c96157e9717786cfe056a82be0349488325abb18cccaf
- SSDEEP 1536:HrcopDa27rEqdb1z9GR5Ra3fGI2XzFDaK59Lca4cGins2QCcoE94r/+b1mNcIAIA:Hr3f7Yqd58w3fCd9LcNssnj94rKywIYx
- TLSH T11393F1FEFD4D2565DE8E36B268D3104D07D666A83D85DC047F2B4203A6EB2A0293877D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/OjarLangForBat/ojar.exe unpack001/OjarLangForBat/other/src/bin/1d/Don't see/BIN/editor.exe
File Explorer
-
OjarLangForBat.zip.zip 88KB
-
OjarLangForBat/README.txt440B
-
OjarLangForBat/desktop.ini113B
-
OjarLangForBat/learn/New 1.txt12KB
-
OjarLangForBat/ojar.exe.exe 83KB
-
OjarLangForBat/other/src/bin/1d/Don't see/BIN/com.bat.bat 2KB
-
OjarLangForBat/other/src/bin/1d/Don't see/BIN/editor.exe.exe 49KB
-
OjarLangForBat/other/src/bin/1d/Don't see/SRC/editor.c5KB
-
OjarLangForBat/other/src/bin/1d/Don't see/SRC/ojar.c6KB
-
OjarLangForBat/other/src/bin/1d/Don't see/SRC/ojar_compiler.py.py .sh 45KB
OjarLangForBat/README.txt
- SHA256 0278b4f7199e3fed1b5fe12efa27915fd3b8bf66802a035b83433e4bb1c8f292
- MD5 252133c3b2fa1c4fcaa93e28bfda31ba
- SHA1 8fd29da3278c91c8d410b830518f604edc8cef02
- SHA512 75d405c8f998b607c29073c5b1a83dacbe20802210025b0737d1e7ee2ae8516a9f5892ff035a92c252daf839c06db15efca3ac62905e7918a43c828df0124dfa
- TLSH T1B7F02BCAD36A522403B18B03A4114C90F694E66A17474B60B67D956A0704B4D63F977F
- MD5 SHA1 SHA512 TLSH
OjarLangForBat/desktop.ini
- SHA256 6f8660a051d73d7fe541883dfda3f01a68fdcf559f19762b62bf70bf2bf7f9de
- MD5 ee4a5a0692d0ed6bb74b42d756bdffdb
- SHA1 c4e06cff54d02ca85f1048c15cf0f0fab3fefd33
- SHA512 b1e1fc91a97cc74b44fd1a33c7dfa5d93da912013791e5d4cb44435b8f9e3132cbda7492b61b6f6b15f6eee3b7474032ec16844d31a99fbbd300eb05fd0b0d43
- TLSH T11DB09212AA2EC0F08A07C84FE01D896C5A781C1B987BA80695D461D288A86184E9CE2E
- MD5 SHA1 SHA512 TLSH
OjarLangForBat/learn/New 1.txt
- SHA256 4efbc806c22156b260fb36c271eede2b1bb9464ea5e58e3abca665d1ad4ed094
- MD5 79a8bc288860ba0464872c6eb195468d
- SHA1 5ba81f6be37e348a2a77e95d8275a6cc03884114
- SHA512 fbd5490b55a938e4aeed0ccf8269f37b5897bd8d900ffbbd69a03685bf09e7c2a0a569afb749d51045aa381f69eb254b308ae8baab3bbc181238255263d64e33
- SSDEEP 192:VAlKsj+ANibF0D1t4ocgcvfRxqX2wHkktTjtof7:V6ooH1tmlwHkQjtU7
- TLSH T1264270B5CDE68D907BF2C00D6B931911EB643987F4916251F4CDB10A9BDCB34142FAB9
- MD5 SHA1 SHA512 SSDEEP TLSH
OjarLangForBat/ojar.exe
- IMPHASH 868e0204f79c7e214b968d63cda45974
- SHA256 11ff5ebf1a72eb0a627bdd63ac3d0a44e9d57ba0da1a4ec55997c32fe1ddb5ab
- MD5 6e0f3d9d37d37f495d732686c1da2622
- SHA1 96ca356e3eb98a2618fb89ebf4095976f5fc14b5
- SHA512 65903d8ca0beaa2c16ad0a8a0b2fb962ab2bf74ca2e3cdc2901b6a6b7cdac57cc0e6de6311ffe30e5c713b2ef234f785fd8228ff392553b146e8bea1e6ab2828
- SSDEEP 768:oHDF04q2fx+VEZqhq20O29hYiAcvU59ImAuKcXGgksuQ5RyeGSTYaFenQrrLLFRy:+HBZshIOA+bOc2WuQEILLFbQZqI8lW
- TLSH T184832A85FA8B10F1F66361B0999BE77FC531AA178028FEBAFF4D5249F133B426509106
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5312
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentDirectoryA
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_access
_amsg_exit
_cexit
_errno
_findclose
_findfirst
_findnext
_initterm
_iob
_lock
_onexit
_unlock
abort
atoi
calloc
exit
fclose
fgets
fopen
fprintf
fputc
free
fwrite
getc
getchar
islower
isspace
isupper
isxdigit
localeconv
malloc
memcpy
memset
realloc
setlocale
signal
strchr
strcpy
strerror
strlen
strncmp
strtol
strtoul
system
tolower
ungetc
vfprintf
wcslen
Name
.text
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
140B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.eh_fram
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
OjarLangForBat/other/src/bin/1d/Don't see/BIN/com.bat
- SHA256 6aeb563ec50f7d243057e3548298e454ca8f7ea464d56cbf9945d611e49ab0c1
- MD5 9e5f26c812932703b985a4ec21a372e7
- SHA1 00a62c4eff21f06b9d9ddb271452d45a70b3aee9
- SHA512 29743c9c4a767e99da4f02e7f206add6fb18b2efc273738ac8198235352da9bfc5ddfc956896bbf2634cbcc9aaf72efd4c42be49657bd6d641567d4e1793b5c9
- TLSH T12D5122313098105470B4DE9C4AB94C42E48575CBF6552D59B56EB0E41FFC3D1EEF8AB8
- MD5 SHA1 SHA512 TLSH
OjarLangForBat/other/src/bin/1d/Don't see/BIN/editor.exe
- IMPHASH 22177d344d9c4cb049ec629151b0ded3
- SHA256 dd206a797b210d03d626b1e1fba5ec02504ef578def52dc81c7aba8bf46960e3
- MD5 72b215aa169bbf7d1b6f32b7003601e0
- SHA1 827efd5c0019dda82982b0e712a38228241c40e5
- SHA512 6a47b3ab5bbfb1d93aa942d189a4fd2a2c58d4a423730cb9a75eab3b4ef90e54edb5dc0480497e461d492601ef2780a8948a9a8afb64c8173eced81ae63b94c3
- SSDEEP 768:psQm5OPvDPL0j5YecEjb4H58QywKeurHvWXZZJbpuWkq:pIO3rMYBO4uQ7F9YWkq
- TLSH T1B1331999FA47A0F0F66271B0999BD77BC539EA134420F97AFF4E9348B433A425819107
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5312
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetConsoleScreenBufferInfo
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetStdHandle
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleCursorPosition
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteConsoleOutputCharacterA
msvcrt
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_errno
_getch
_initterm
_iob
_lock
_onexit
_unlock
abort
atoi
calloc
exit
fclose
fgets
fopen
fprintf
fputc
free
fwrite
localeconv
malloc
memcpy
memmove
memset
setlocale
signal
strchr
strcpy
strcspn
strerror
strlen
strncmp
system
vfprintf
wcslen
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
372B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.eh_fram
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
252KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
OjarLangForBat/other/src/bin/1d/Don't see/SRC/editor.c
- SHA256 c2ca0c36896c52e3f81ff4c77a1ac19684d1d4a937afad7172de4a07e6c02e78
- MD5 3d2ee34b9defc81a5f8b34b6313d9148
- SHA1 b8d72e070722fe6dfca77829a049e0b86cbd34f4
- SHA512 74e3e22528ead26d8fc0d80adaaf810398d0f378c87c934cfbab2a8e7ebe60eba966830734618f834fae0fe0dee4870f0e1245aa7e3fd77c91d2f06ae48358f9
- SSDEEP 96:xXZNWNxsJSe4zC8HeDY0s+A3bBPLEgS0O1JmOtwJE:xeOSe4+GeirpJE
- TLSH T16CC1F026786556E36932AB3E9FD3400FE354F4E30485EB04FE9D95491F340AA42F0EB6
- MD5 SHA1 SHA512 SSDEEP TLSH
OjarLangForBat/other/src/bin/1d/Don't see/SRC/ojar.c
- SHA256 9c6d481205d85207eefd44dad16050243f6f26bdcf9e95b1a9bcda12c8d14b37
- MD5 04a0877b703228522c8143f031e9d069
- SHA1 c5ac2c91a59d4adba6677f4c2d55bbdb69cd56ab
- SHA512 bee8b552e346aa54831f7c4702583d6856edcafd8033e0bac228ba8de3be8437d9dbbb6a264cb2111c31432726b10fe5b63b2b4c86024d721ce1f0e718c58b57
- SSDEEP 48:KCzqlI8qnJ5FEvcxAvkAoj7MnJ+STf0BAW//Op2Vpp/Mw85o0uW9etoNW+I8HBvL:KjO8Q5ucCvGi+jIIfyPuW9eN8e1KfIE
- TLSH T108E187884C0D1A11A0739B2DCF424C18E99F9E1721AEFB51F4FE55612F32716C5A8EAE
- MD5 SHA1 SHA512 SSDEEP TLSH
OjarLangForBat/other/src/bin/1d/Don't see/SRC/ojar_compiler.py
- SHA256 07babcc44ce1e4ee4d06df109fa2de3e7457efb42ad59d45b1ab6b82478bc5c1
- MD5 e9a2d67859c3c5cd30e849ac6dcbb10d
- SHA1 a34c9d9f3820577c72484fc89015202d7fe96b87
- SHA512 54cfa040b2e319e4e518f81cc6e650a498552af73481e1e6cc846517c6a165b59b31d4a62b32b1ad4d4a4ab9de38ad02181a348b49d8b03bc709b75a54a89091
- SSDEEP 768:s6Dl0rYiyH8aE6CZ8/FEGd8rqIE+nZNCJ9R778NTA:t/n8rjn7MuTA
- TLSH T1D7234075A9A5185593438C3969B7EC03611D6E03C24C2A2D78FC94E85F74822EFBBED8
- MD5 SHA1 SHA512 SSDEEP TLSH