Static task
static1
Behavioral task
behavioral1
Sample
3eda79ecb8a052exeexe_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3eda79ecb8a052exeexe_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
3eda79ecb8a052exeexe_JC.exe
-
Size
256KB
-
MD5
3eda79ecb8a052cf18ff205b211cf639
-
SHA1
48d0474754cb76e95fd7915dbff05883644adba2
-
SHA256
7c3f11932ca7b228a20b63e135db10788fd911b41a05893082812a4a7526895a
-
SHA512
d49fe3cf59f8a4a0034d4296eb2bcaf02dd8a99e7f1e8332d623d331574320a1a70a12bcd77e7bf271aa7aeeafd91fd55eedeacd565914b2d37b8f6ac3ae64fa
-
SSDEEP
3072:zc6KW43LreN2YvqpQFDvdbPi+FISXXzsfB3wyHoC29mGXoWRu2V8CNLn3GU:zoW434JqZ84533Hoh82owBz3GU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3eda79ecb8a052exeexe_JC.exe
Files
-
3eda79ecb8a052exeexe_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 216KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE