Static task
static1
Behavioral task
behavioral1
Sample
7f34ca6249b2e1d2b908765af70d5f3bfe645407c6ff65a3e2a24ffeb7b2ddc9exe_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
7f34ca6249b2e1d2b908765af70d5f3bfe645407c6ff65a3e2a24ffeb7b2ddc9exe_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
7f34ca6249b2e1d2b908765af70d5f3bfe645407c6ff65a3e2a24ffeb7b2ddc9exe_JC.exe
-
Size
174KB
-
MD5
be62d81a6b1d8c145c4204743f5e0ae2
-
SHA1
8a62d24b0f38cd759d974f9cab8da5000c95e6d9
-
SHA256
7f34ca6249b2e1d2b908765af70d5f3bfe645407c6ff65a3e2a24ffeb7b2ddc9
-
SHA512
3b1ec702ab69b616419da7db10d0c3c19bdf4eb849c138ed877853c339db194fa4277f3ea1a9cf51666e4e789d254e6679fb67816d5e02d76b6bbad394d3b0cb
-
SSDEEP
1536:lAY1c9wqvnAv77vvvvv7vvvvvvv7vvvvv64+mhhhm+DtqOgd:/+9wqY+mhhhmitqOW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f34ca6249b2e1d2b908765af70d5f3bfe645407c6ff65a3e2a24ffeb7b2ddc9exe_JC.exe
Files
-
7f34ca6249b2e1d2b908765af70d5f3bfe645407c6ff65a3e2a24ffeb7b2ddc9exe_JC.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
NA%fkX0 Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ