Static task
static1
Behavioral task
behavioral1
Sample
8f001186d43d1a_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8f001186d43d1a_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
8f001186d43d1a_JC.exe
-
Size
64KB
-
MD5
8f001186d43d1a48fa2216e0d2c66dcd
-
SHA1
8c2a757730744f89241b30fd99ca2f0792ebb0a7
-
SHA256
8c4979a7f86b49a62cc6273f5d395a648af51e567e6ea04eb4c5d6392085df67
-
SHA512
c09b484301d5b6fb84e1c1186bd522829e00a8bc3bf9b7f32773ef73c439a6677a9002574def08b00e01c30e23b780433f7fc7c71fb8da72f2a05c1d8d16f1ed
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfb6kZq/gqASiLRNcK1JK+:xj+VGMOtEvwDpjub6kZq8hLRlJK+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f001186d43d1a_JC.exe
Files
-
8f001186d43d1a_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 17KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE