jailbreak%20%282%29[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
jailbreak%20%282%29.exe
Size 984KB
Sample261030-g41gwsbs8k
SHA256 59ac82d68753e0de3fb58815db5a068363b2a207c5ee0b92f2a8a7ba56048e49
MD5 e11e27ba0a45c63fc9924fa40bb0e210
SHA1 5dc3dd427b177dcbe24f47b4e1ee29ea5d23e81b
SHA512 333d40ea8d50d04aa28f575812330187388a362e726a3252cc35cb813bbdc9a0873442f6f6d8202c305c0ad8fbd688963f4d72631edc45bc928036f1796572f1
SSDEEP 12288:otZ+4CUXf5+VJ3FKEufKNtRWBuH4IWPA3mT+7fQhQtvGuy/KPrvxhqbgsJOzoip7:jXUXf56VKtStIBuYWvGuykv70JOzd
TLSH
T121252A1BE6B345E8C52FD07487639772BE70B4290234BD6E1AA8DB321F21D509F6E724
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jailbreak%20%282%29.exe

File Explorer

jailbreak%20%282%29.exe

.exe 984KB

jailbreak%20%282%29.exe

IMPHASH df4d7972b04b510210ad59439a30ccc2
SHA256 59ac82d68753e0de3fb58815db5a068363b2a207c5ee0b92f2a8a7ba56048e49
MD5 e11e27ba0a45c63fc9924fa40bb0e210
SHA1 5dc3dd427b177dcbe24f47b4e1ee29ea5d23e81b
SHA512 333d40ea8d50d04aa28f575812330187388a362e726a3252cc35cb813bbdc9a0873442f6f6d8202c305c0ad8fbd688963f4d72631edc45bc928036f1796572f1
SSDEEP 12288:otZ+4CUXf5+VJ3FKEufKNtRWBuH4IWPA3mT+7fQhQtvGuy/KPrvxhqbgsJOzoip7:jXUXf56VKtStIBuYWvGuykv70JOzd
TLSH
T121252A1BE6B345E8C52FD07487639772BE70B4290234BD6E1AA8DB321F21D509F6E724
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

GetUserNameA

kernel32

CloseHandle CreateThread DeleteCriticalSection DuplicateHandle EnterCriticalSection ExitThread FormatMessageA FreeConsole GetComputerNameA GetConsoleWindow GetCurrentProcess GetCurrentThread GetCurrentThreadId GetExitCodeThread GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoA GetSystemInfo GetSystemTimeAsFileTime GetThreadId GetTimeZoneInformation InitializeConditionVariable InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryW LocalFree MultiByteToWideChar RaiseException ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetLastError SetUnhandledExceptionFilter Sleep SleepConditionVariableCS TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WaitForSingleObject WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _commode _errno _fmode _fstat64 _initterm _ismbblead _localtime64 _lseeki64 _onexit _time64 _wfopen abort calloc exit fclose fflush fopen fprintf fputc fputs free fwrite getenv iswctype localeconv malloc memchr memcmp memcpy memmove memset realloc setlocale setvbuf signal strchr strcmp strcoll strerror strftime strlen strncmp strtoul strxfrm towlower towupper vfprintf wcscoll wcsftime wcslen wcsxfrm _write _read _fileno _fdopen

user32

CallNextHookEx DispatchMessageA GetAsyncKeyState GetForegroundWindow GetKeyState GetMessageA GetWindowTextA SetWindowsHookExA ShowWindow TranslateMessage UnhookWindowsHookEx

wininet

HttpOpenRequestA HttpSendRequestA InternetCloseHandle InternetConnectA InternetOpenA

Name

.text

Size

782KB

Virtual Size

781KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

70KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

65KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jailbreak%20%282%29.exe

advapi32

kernel32

msvcrt

user32

wininet

generic