Suspect
f4f499c72dfb269bfb5c435757e97486
JavaScript
MD5: f4f499c72dfb269bfb5c435757e97486
Size: 20.47 MB
application/javascript
This sample is a 19.5 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 18 embedded or derived files. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- bac35e8d870461b358fb02e713c2bd56b9cfcd0b50cfa1286b832d354241ee81
- MD5
- f4f499c72dfb269bfb5c435757e97486
- Verdict
- Inconclusive
- File type
- JavaScript · 19.5 MB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/bac35e8d870461b358fb02e713c2bd56b9cfcd0b50cfa1286b832d354241ee81
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript (reclassé : grammaire non-VBScript)
Size
20.47 MB · 20,465,029 B
First seen
2026-09-30 00:30 · 26 days ago
Last seen
2026-09-30 00:30 · 26 days ago
Last analysis
2026-09-30 00:30 · 26 days ago
Hashes
MD5
f4f499c72dfb269bfb5c435757e97486
Sha1
0c63f898719ad77d217f9e088f2795b39647e989
Sha256
bac35e8d870461b358fb02e713c2bd56b9cfcd0b50cfa1286b832d354241ee81
Sha384
d51d0ab053d513ee7018166d281e1a21b74815df0bbb46b385927bbfeb2322e240aeb4daa202814866e00a1e9aee25c1
Sha512
0fa877005540523f0a64db43f4a7f851dec42dc1676ba12be1f8035f707503cd8929df3d64bc4d64d9d77cc61cfdbebde81871431315e1e1184833f66cdfd52d
SSDeep
393216:ERBnK0FErXYtZq5Xp0XeXNzCKaRHsxGEDwejz9Fnlb9a:85mrXYtZq5aXaNz5alwG7ejBBa
TLSH
0427339973D40863E89A617D68E3C667A3E0B5211731CEEE0BD507782EBB5D4CD387A0
Detection
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
19 files
JSf4f499c72dfb269bfb5c435757e97486T1059.007
Structure
JSOverlay_b1338bf6.binT1059.007
BINResources
BINRT_ICON
BINID:0001
IMGID:0
IMGID:0-preview.png
BINID:0002
IMGID:0
IMGID:0-preview.png
BINID:0003
IMGID:0
IMGID:0-preview.png
BINID:0004
IMGID:0
IMGID:0-preview.png
BINID:0005
IMGID:0
IMGID:0-preview.png
BINID:0006
IMGID:0
IMGID:0-preview.png
BINID:0007
IMGID:0
IMGID:0-preview.png
BINRT_GROUP_CURSOR4
BINID:0001
BINID:0
BINRT_VERSION
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
pe:exe~T1059.007>pe:rsrc>img
Shape
pe:exe>pe:rsrc>img
technique3 nodes
Path
pe:exe~T1059.007>pe:rsrc>bin
Shape
pe:exe>pe:rsrc>bin
technique3 nodes
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_b1338bf6.bin (20162949 bytes) |
| Info | PDB Path: t$mn |
19 files
JSf4f499c72dfb269bfb5c435757e97486T1059.007
Structure
JSOverlay_b1338bf6.binT1059.007
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account