Static task
static1
Behavioral task
behavioral1
Sample
Jrdfl.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
Jrdfl.exe
Resource
win10v2004-20230703-en
General
-
Target
Jrdfl.exe
-
Size
64KB
-
MD5
17e886cf4735bf3961364832a33eb7ec
-
SHA1
7549cb1ee4cb558b730aa81e7266642de9395fc2
-
SHA256
509ab6d6f1089879e023ce06a093219765d41c19e2f6252f5ae7bd276483733d
-
SHA512
5004cac7a4b1c65cdc9c0e7554080855e68cc2ea217f8a36cf40f7165154b01b173a631f48d5b150c9c6c494170a72f8c6809a9f79052bfbe897bb46b7d22bdd
-
SSDEEP
1536:5h2JA86sJ925puV8kyc4F9nY++cUD+5+xCOwKcbLFIFBYp2bHJVQ:5h2JA86sYuPmFpJUDePKcPFIFBYpV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Jrdfl.exe
Files
-
Jrdfl.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ