Static task
static1
Behavioral task
behavioral1
Sample
f9a4620f23e2486480307c9a1ac92ee2783f2828bf8e8601e619b670c78673bb_JC.exe
Resource
win7-20230712-en
General
-
Target
f9a4620f23e2486480307c9a1ac92ee2783f2828bf8e8601e619b670c78673bb_JC.exe
-
Size
335KB
-
MD5
781585b215c56b49540936013f1468b4
-
SHA1
4d3bf2a823bb6fab015ba843c6993f164ee0991d
-
SHA256
f9a4620f23e2486480307c9a1ac92ee2783f2828bf8e8601e619b670c78673bb
-
SHA512
5ec19627b42b2175f1dc6fe3563b4d445538ee49fb603be0bc92301e32f8a92b66ca8ce70568dbebafa7c6ad9b61f687beffde884fc1612976f5c95c2bbd1a80
-
SSDEEP
6144:s0yyNL83k1gfQEsv4muuIeuwPAhyz9nHBeJZhB:s/06k1gfQhvMe4hypBeJ1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9a4620f23e2486480307c9a1ac92ee2783f2828bf8e8601e619b670c78673bb_JC.exe
Files
-
f9a4620f23e2486480307c9a1ac92ee2783f2828bf8e8601e619b670c78673bb_JC.exe.exe windows x86
57c957ecde7ffcaeaa065ed04df47092
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FillConsoleOutputCharacterA
WriteConsoleInputW
GetConsoleAliasesLengthW
InterlockedIncrement
InterlockedCompareExchange
GetTickCount
GetCurrentThread
CreateActCtxW
LoadLibraryW
ReadConsoleInputA
TransactNamedPipe
GetNamedPipeInfo
HeapValidate
GetACP
DisconnectNamedPipe
GetConsoleAliasesW
GetProfileIntA
GetLastError
GetProcAddress
GetDateFormatW
LoadLibraryA
DeleteTimerQueue
Module32FirstW
FoldStringW
CreatePipe
EnumResourceTypesW
FindNextFileA
HeapSetInformation
UpdateResourceW
TlsAlloc
AreFileApisANSI
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
VirtualAlloc
GetComputerNameA
WideCharToMultiByte
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleW
ExitProcess
GetStartupInfoW
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
WriteFile
GetStdHandle
GetModuleFileNameA
HeapAlloc
HeapCreate
VirtualFree
HeapReAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetFilePointer
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
HeapSize
GetOEMCP
IsValidCodePage
GetLocaleInfoA
CloseHandle
CreateFileA
GetModuleHandleA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetEndOfFile
GetProcessHeap
user32
LoadMenuA
CharLowerBuffW
CreateAcceleratorTableA
CharToOemBuffW
CharUpperBuffW
gdi32
GetColorAdjustment
Sections
.text Size: 257KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ