Static task
static1
Behavioral task
behavioral1
Sample
Document.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Document.exe
Resource
win10v2004-20230703-en
General
-
Target
49de024fbb66e46b3f82c7a784abac62c2b75ee30b8320764ee8f801625e7633_JC.rar
-
Size
71KB
-
MD5
300fcde275c3e91ba26d35c84d5de5e2
-
SHA1
1a0232ff6eeea3b09bb698ab3b60eacfc8cbbf0a
-
SHA256
49de024fbb66e46b3f82c7a784abac62c2b75ee30b8320764ee8f801625e7633
-
SHA512
c7dd28087fbfc11e68e113ae70eed2a81b7463e95d3c3393bd1e381ff69c437638233b600abc0abf2c9593f68852a196b4127e432da407d30c266f4bef0be4a1
-
SSDEEP
1536:wRF2OoOE31IQz9pP2OFH+aUQrQQ3rUK8LlK3dxozDbVHy:ogOoL3WQl5+aUQB3gKKlM6zvVS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Document.exe
Files
-
49de024fbb66e46b3f82c7a784abac62c2b75ee30b8320764ee8f801625e7633_JC.rar.rar
-
Document.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ