Static task
static1
Behavioral task
behavioral1
Sample
1620149d4c2a94exe_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1620149d4c2a94exe_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
1620149d4c2a94exe_JC.exe
-
Size
2.6MB
-
MD5
1620149d4c2a94b83f8816090982a952
-
SHA1
1e7e70a1fda7bd88511e3d5b97dd3f46eb3eb6e1
-
SHA256
c8d5e38ae97a34f4c5ffeff888ee14ae2134f73932d5c2688494f5709f394a58
-
SHA512
ca8076ca5b057f57f25e0e884c7970f07ada8ba7e401f53d03d78b32a26c5953af1e16592c091811634eea192b5ebfe253146f494276b59c897ca42a204e3355
-
SSDEEP
24576:KNL042jJnOeo94i0SbEo4eMBwhV25iM0/yeu6kf7x5F7r6aKwlUr5Zq:54Oj/jSbqeMBwhV25IrkfVr6DFry
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1620149d4c2a94exe_JC.exe
Files
-
1620149d4c2a94exe_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 668KB - Virtual size: 667KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 603KB - Virtual size: 602KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 380KB - Virtual size: 62.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Astrict Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
����� Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
���ݲ�д Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�����̳� Size: 800KB - Virtual size: 800KB
IMAGE_SCN_MEM_EXECUTE
�ƺ��Ų� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ht Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ht1 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE