Static task
static1
Behavioral task
behavioral1
Sample
JGSteel.BIM.Monitoring.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
JGSteel.BIM.Monitoring.exe
Resource
win10v2004-20230220-en
General
-
Target
JGSteel.BIM.Monitoring.exe
-
Size
51KB
-
MD5
8b6174009c7b4f4a662c675d059b64db
-
SHA1
10cd9db148ec4aedc21359c36b809e0e46d7cd5c
-
SHA256
3036bf566427200ce116ca49b0cd4cf8026e36bc7e36cbc385fbf71a718360de
-
SHA512
e373364a95202b03302e63c4c00ff080eb565cb170575683f4676b573da8a515581f18c910bb386373af8a074243ee63ea5ddbe419aae30cbd18084edb78bed3
-
SSDEEP
768:lhyyNgNUQ73+GszeVt+kVt+Zg0KI40J6dgr6At9zVt+:z8wBHZTE0J6uDa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JGSteel.BIM.Monitoring.exe
Files
-
JGSteel.BIM.Monitoring.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ