Static task
static1
Behavioral task
behavioral1
Sample
JPMorgan Chase.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
JPMorgan Chase.exe
Resource
win10v2004-20230220-en
General
-
Target
JPMorgan Chase.rar
-
Size
1000KB
-
MD5
94bc34e3ba9ce5303dcf3c9ca3303ab2
-
SHA1
b8d50d93889b8566b8a54dc2591aeed1461647af
-
SHA256
b9df41d80d182a4c99a995041564a97413fe8702d20c7c5836bc29b509c3e607
-
SHA512
3d5c0027e6e4cf659e63d8a0123b75ed70639d2730c4ab5e0bd03cd0cd825b176e1cced1df65662c775d99b1c1715668d80b10eeee387b0159ab424700247a1b
-
SSDEEP
24576:hOBXoufKc86j0YfkiaCOnxldgvrC2H5LkPO:Mprb8LyW0vwG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/JPMorgan Chase.exe
Files
-
JPMorgan Chase.rar.rar
-
JPMorgan Chase.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1014KB - Virtual size: 1014KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ