Static task
static1
Behavioral task
behavioral1
Sample
d0a8fcc939ff496d2a2e4c5ad862b297913d2fee8b7f0a89c01f4a0bdf40bb26_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d0a8fcc939ff496d2a2e4c5ad862b297913d2fee8b7f0a89c01f4a0bdf40bb26_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
d0a8fcc939ff496d2a2e4c5ad862b297913d2fee8b7f0a89c01f4a0bdf40bb26_JC.exe
-
Size
451KB
-
MD5
33c0ff96857b7c9a62ad797ea8b99e40
-
SHA1
f5a4e9e899cdde1a13fafdc96b9526fa679da479
-
SHA256
d0a8fcc939ff496d2a2e4c5ad862b297913d2fee8b7f0a89c01f4a0bdf40bb26
-
SHA512
da4f3887a60687a704f9d7ca61543dd76dd37b3e7194c7257085e578102984e94daad73e619de324bafd6de64980b12c8f37656b6fc2a6270d76f4a74b7a914b
-
SSDEEP
12288:SbK/qcpcIc55AOnmxLb7fTrK09SnfXeMtIPd:Sgqc4CLb7fT3Sn/eMtIP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0a8fcc939ff496d2a2e4c5ad862b297913d2fee8b7f0a89c01f4a0bdf40bb26_JC.exe
Files
-
d0a8fcc939ff496d2a2e4c5ad862b297913d2fee8b7f0a89c01f4a0bdf40bb26_JC.exe.exe windows x86
9abb349fb2529ebfb2be5d3078c97f33
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleInputW
GetConsoleAliasesLengthW
InterlockedDecrement
InterlockedCompareExchange
GetComputerNameW
GetTickCount
GetCurrentThread
LoadLibraryW
ReadConsoleInputA
FormatMessageW
TransactNamedPipe
GetNamedPipeInfo
HeapValidate
GetModuleFileNameW
CreateActCtxA
GetACP
DisconnectNamedPipe
GetConsoleAliasesW
GetProfileIntA
GetLastError
GetProcAddress
VirtualAlloc
SearchPathA
LoadLibraryA
DeleteTimerQueue
FindNextChangeNotification
Module32FirstW
FoldStringW
FindNextFileA
GetModuleHandleA
HeapSetInformation
UpdateResourceW
WriteProfileStringW
TlsAlloc
AreFileApisANSI
LCMapStringW
LCMapStringA
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
GetStartupInfoW
RaiseException
RtlUnwind
WriteFile
GetStdHandle
GetModuleFileNameA
HeapAlloc
HeapFree
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
SetFilePointer
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetStdHandle
GetCPInfo
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
CreateFileA
CloseHandle
GetStringTypeA
user32
LoadMenuA
CharLowerBuffW
CreateAcceleratorTableA
CharToOemBuffW
CharUpperBuffW
Sections
.text Size: 342KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 20.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ