Static task
static1
Behavioral task
behavioral1
Sample
952c82608e4785_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
952c82608e4785_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
952c82608e4785_JC.exe
-
Size
323KB
-
MD5
952c82608e4785efe66bec66ca07473e
-
SHA1
0e5e3a7ca94c7bf7e859c26d7c2c77c3024ca109
-
SHA256
e4bb8c83809fea9e9ea91ef7f3ef37c64f89f126179f32c7318d1623eed3801e
-
SHA512
249aef82df0ccc40ea7b7002f04801d8f01bbc7154ac75db60767d9d9853d3874b030bc74c1f592935229f6d2e47f44bf4d71ef8d27614c298df818b887f4748
-
SSDEEP
6144:0uJFLUb2Jk45ItrVe5h+mT5EWZxYrYBei6/:0uJFgb2aDVkT5EYxYrQU/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 952c82608e4785_JC.exe
Files
-
952c82608e4785_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 228KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE