Static task
static1
Behavioral task
behavioral1
Sample
8dae4389dcaef3_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8dae4389dcaef3_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
8dae4389dcaef3_JC.exe
-
Size
483KB
-
MD5
8dae4389dcaef381e64499371139e07e
-
SHA1
439250ac636146fe30b80340a515b58244847490
-
SHA256
12a5f9866d87607bb252d5b2a76be6f34de5a0aa03fef055ad3aeee0c12277c1
-
SHA512
c50e92bd165845d09542b0d0305ebbb875fbffdec5a96ac2de151511dcf7b2e412f95b3e534bcb78d09a2f09c934f42bdb24c61beffcb49395c9055774dae762
-
SSDEEP
12288:KfweL4ri+dcsvrqSlvICMhh2BIY2f3DNH1jVPn5BjvrEH7p6:KItectDfMAu3jjVfnrEH7A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dae4389dcaef3_JC.exe
Files
-
8dae4389dcaef3_JC.exe.exe windows x86
08e515c74c8f30a33f9634bea8550cdc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
WideCharToMultiByte
GetLastError
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
FormatMessageW
GetACP
LocalAlloc
LocalFree
LoadLibraryW
CloseHandle
CreateFileW
DeleteFileW
LoadLibraryExW
FreeLibrary
GetFileSize
ReadFile
EnumResourceNamesW
CopyFileW
Sleep
BeginUpdateResourceW
EndUpdateResourceW
FreeResource
UpdateResourceW
GetTempPathW
GetTempFileNameW
EnumResourceLanguagesW
GetProcessHeap
SetEndOfFile
CreateFileA
WriteConsoleW
SetStdHandle
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLocaleInfoW
HeapAlloc
HeapFree
GetCPInfo
GetCommandLineW
HeapSetInformation
RaiseException
RtlUnwind
LCMapStringW
GetTimeFormatA
GetDateFormatA
CompareStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetProcAddress
GetModuleHandleW
ExitProcess
GetModuleFileNameW
HeapCreate
HeapDestroy
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
GetTimeZoneInformation
SetEnvironmentVariableA
user32
LoadAcceleratorsW
CopyAcceleratorTableW
shlwapi
PathFileExistsW
Sections
.text Size: 314KB - Virtual size: 313KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ