Static task
static1
Behavioral task
behavioral1
Sample
6d292058a57f99_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6d292058a57f99_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
6d292058a57f99_JC.exe
-
Size
259KB
-
MD5
6d292058a57f9967ab24a5b3068f2951
-
SHA1
4473ea3977cf5738a5689970f713e87be5eb062a
-
SHA256
39d9f6584548cfa30b42bb1d3713eaf38a2eacf87f6369aab202955f62a580c2
-
SHA512
94abda887a6dbed7f22f9d00885206236877cf1d93c0fa27c489476f89a49b77dec0b2b40ba7e3c0616a45f516da0175ff6fbbbb9d4870be3ce2808e3be93ea7
-
SSDEEP
3072:wSAjCo7pLGazTpLj5mf8Q+F1r0mVcaEv7HObquTnR/ZRH2V8CNLn3GU:wS8CoBbTsOnEybnlkBz3GU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d292058a57f99_JC.exe
Files
-
6d292058a57f99_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 218KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE