janitor-scraper_Windows_x86_64.zip
- SHA256 4e1e813f05be7cbc56f80dfce03cfbf6ac9f47973c73d882655ef4e3b1fe3adb
Password
infectedbs
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
janitor-scraper_Windows_x86_64.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
15 signatures
300 seconds
Behavioral task
behavioral2
Sample
LICENSE
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
300 seconds
Behavioral task
behavioral3
Sample
README.md
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral4
Sample
janitor-scraper.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
300 seconds
General
- Target janitor-scraper_Windows_x86_64.zip
- Size 4.0MB
- Sample261107-skvcbady5l
- SHA256 4e1e813f05be7cbc56f80dfce03cfbf6ac9f47973c73d882655ef4e3b1fe3adb
- MD5 8bcf8a6928aa9122371fec1b2c5a1a71
- SHA1 18898c78751f1d236be324163180ab904a1de466
- SHA512 0ea32ee00d1108a2afd4802e13c2e8e20e579cc62f4cab73f8f61c8950753cde142f9bba148452fdcc4ba2e0602d713134367a0b48b0fe6b121cb2d2179638ac
- SSDEEP 98304:gGcFWRpKcyu/9GxyOKguCnCQPbyafiVIl7n1YNJED8xT5dEP:PsAIuaLDiCnqNJED8xgP
- TLSH T1EB1633B31D749D24059A97AF1D2E36A2F0BD8C5F631B85F37446BA70E01C6803EAB9C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/janitor-scraper.exe
File Explorer
-
janitor-scraper_Windows_x86_64.zip.zip 4.0MB
-
LICENSE34KB
-
README.md4KB
-
janitor-scraper.exe.exe 10.1MB
LICENSE
- SHA256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986
- MD5 1ebbd3e34237af26da5dc08a4e440464
- SHA1 31a3d460bb3c7d98845187c716a30db81c44b615
- SHA512 d361e5e8201481c6346ee6a886592c51265112be550d5224f1a7a6e116255c2f1ab8788df579d9b8372ed7bfd19bac4b6e70e00b472642966ab5b319b99a2686
- SSDEEP 768:Fo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7J:Fhcycsrfrnoum
- TLSH T15FF2835FB74413B2018206A26A9F68DEE319D03A73664095785DC15C27B3E3483BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
README.md
- SHA256 dab8062c580056e9cf256e751e5e6bdf66542ce9b3d93d84fd103a2b281d586d
- MD5 7b1754358588f1374974b763a2a183ba
- SHA1 648608e8be9b183ed8de459e0011d127ec0c53aa
- SHA512 79aa156001db18c67190dee181856d6d1ce6655241fa9cd8a827ea7af690b67ae5d6ccbcc3f16e748ebd615a734ff824f3cdda4a8089749f1f518b1fac663955
- SSDEEP 96:sPFABK4i8XpxmFXTSm85x9jNd6RL/7apNlGVZ47A3Hn:sPAAWm8j9JOj74NlGVZkc
- TLSH T1619182363F05927B32A3D32D6A1EB5DA6B3070E13328441868ADB46873CE6290376CF4
- MD5 SHA1 SHA512 SSDEEP TLSH
janitor-scraper.exe
- IMPHASH ed8b780a3ce7ca4aba78a21f6bc3d4e0
- SHA256 a91ec2afb35ab9fd226c113ffb0b7d9d359d6bbd18f4dd40a5fc1f996d93835e
- MD5 88aabfaf3ce70d89ad77fef1ab13e73e
- SHA1 17d134819e846963c6f6704d534acc242940e4b2
- SHA512 28a71a69746c52205b49550ae63f017719ad99f0ed0c4272553db6a2f65e41d3802747ee36a2ef2789760eed15483319a54123e1432114246dfac1dc9e853561
- SSDEEP 98304:kPnF8UjT9aEBmZ0TiwHj+n5woqJVPkhEe:m+mT4eHj+nOIi
- TLSH T113B63907ECA918E9C0EDC131896796127B71BC454B2223D71B60F6292F77FD4AEB9360
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infectedbs
Minor OS version
1
Major OS version
6
Entry point
574560
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetProcAddress
LoadLibraryExW
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
QueryPerformanceCounter
PostQueuedCompletionStatus
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
4.5MB
Virtual Size
4.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5.0MB
Virtual Size
5.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
413KB
Virtual Size
32.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
121KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
93KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ