Static task
static1
Behavioral task
behavioral1
Sample
e04d7fb89ac993_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e04d7fb89ac993_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
e04d7fb89ac993_JC.exe
-
Size
259KB
-
MD5
e04d7fb89ac99312dc2b0e428921ea49
-
SHA1
6e468c9c0430c546c8094efd6170a8ae633429eb
-
SHA256
2a1c8e9442211c759b1ea8338188c524dd82d135b6cdfaca8e5280fcb9002496
-
SHA512
8ef1cfcf09a12d095691add0fe4fe1a53b86acd94e2dce37169ca8847a997b8ebe65beafa61f73342437246802ea833b8d96f4babc9772ce6ceac35baa8f2fa1
-
SSDEEP
3072:RypziIf77R872oPyp4lbF5C5sC+d/4qscaEv7HObqzmnqzbZRH2V8CNLn3GU:RoziIfa7JyB5/4GnEybg2akBz3GU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e04d7fb89ac993_JC.exe
Files
-
e04d7fb89ac993_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 218KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE