Static task
static1
Behavioral task
behavioral1
Sample
ca208d4d6d9e2f_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ca208d4d6d9e2f_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
ca208d4d6d9e2f_JC.exe
-
Size
82KB
-
MD5
ca208d4d6d9e2f60c2acb8c0c1e26969
-
SHA1
0b28e089435af3f0a6726b8ce24dc3cf8569dfff
-
SHA256
d83a7a3ebb592e305164e4677a55e5ea12282a617ca91af00344a6558d6dbacb
-
SHA512
f1ce5178ab103602b1c9501311d406ac6088cb418cbd21e129e5017d238b25a7ea13effa60e384e2c6465f491997e0223e1ff87207e54b88047be3afa688d666
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/RvDQeduJHqqnzvNG1D:ZzFbxmLPWQMOtEvwDpj386Sj/RsxQzMk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca208d4d6d9e2f_JC.exe
Files
-
ca208d4d6d9e2f_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
petite Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ