Static task
static1
Behavioral task
behavioral1
Sample
fbeb0e6de10d48fd33bc786c5303351e4261330f5d9fc89bfad70a1e085d4735_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fbeb0e6de10d48fd33bc786c5303351e4261330f5d9fc89bfad70a1e085d4735_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
fbeb0e6de10d48fd33bc786c5303351e4261330f5d9fc89bfad70a1e085d4735_JC.exe
-
Size
860KB
-
MD5
bd075ee1eb2fef22e7580d45f651c795
-
SHA1
d3a63ca9eeed90ec98b991877cb9bbda4ffe9d1b
-
SHA256
fbeb0e6de10d48fd33bc786c5303351e4261330f5d9fc89bfad70a1e085d4735
-
SHA512
7c959301ba1a90de5983a4595facf8e3879d7dc10819ade05e53644226b1ba0b55e2098cec79a0256592801e7db370137602de30b05e7adae1e7be3760b2001c
-
SSDEEP
12288:uaGetS/ITJqrraq/t2qny6xdRhMAK4vcmPEl0Io:quS/UEn/tUIMGPEl0I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbeb0e6de10d48fd33bc786c5303351e4261330f5d9fc89bfad70a1e085d4735_JC.exe
Files
-
fbeb0e6de10d48fd33bc786c5303351e4261330f5d9fc89bfad70a1e085d4735_JC.exe.exe windows x64
02bc376d1ae63a2fef892492d891a666
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
EventRegister
EventUnregister
EventWrite
RegQueryValueExW
kernel32
FlushInstructionCache
CreateFileW
WriteFile
CopyFileW
GetSystemTime
WideCharToMultiByte
GetSystemDirectoryW
GetCurrentProcess
LocalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LockResource
EnterCriticalSection
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexW
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
FindResourceW
GetLastError
LoadResource
SizeofResource
MultiByteToWideChar
lstrcmpiW
GetModuleHandleW
LoadLibraryW
GetProcAddress
lstrlenW
FreeLibrary
FormatMessageW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
InterlockedPushEntrySList
VirtualAlloc
InterlockedPopEntrySList
GetProcessHeap
VirtualFree
HeapFree
HeapAlloc
GetVersionExA
UnhandledExceptionFilter
OutputDebugStringA
LeaveCriticalSection
RaiseException
DeleteCriticalSection
GetCurrentThreadId
TerminateProcess
gdi32
GetStockObject
StretchBlt
CreateCompatibleBitmap
SetStretchBltMode
SelectObject
CreateCompatibleDC
GetObjectW
GetTextExtentPoint32W
SetDeviceGammaRamp
GetDeviceGammaRamp
SetBkMode
SetBkColor
SetTextColor
CreateSolidBrush
GetDeviceCaps
CreateDCW
DeleteDC
DeleteObject
user32
GetWindowTextLengthW
GetWindowTextW
ReleaseDC
MessageBoxW
ShowWindow
GetWindow
GetWindowLongW
DestroyWindow
CharNextW
GetSystemMetrics
GetActiveWindow
RegisterWindowMessageW
FindWindowW
GetWindowThreadProcessId
AllowSetForegroundWindow
SendMessageTimeoutW
MonitorFromRect
EnumChildWindows
GetWindowLongPtrW
SetWindowLongPtrW
OpenIcon
GetDC
SetWindowPos
CallWindowProcW
SendMessageW
DefWindowProcW
GetDlgItem
GetWindowRect
MapWindowPoints
MoveWindow
InvalidateRect
GetParent
KillTimer
SetTimer
SetWindowTextW
PostMessageW
MonitorFromWindow
EnumDisplayMonitors
UnregisterClassA
GetMonitorInfoW
SetCursor
LoadCursorW
ShowCursor
EnumDisplayDevicesW
SetForegroundWindow
MapDialogRect
LoadStringW
msvcrt
_vsnwprintf
powf
?terminate@@YAXXZ
_errno
realloc
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_cexit
_exit
_XcptFilter
__wgetmainargs
__C_specific_handler
memset
swscanf_s
_wcsupr
_purecall
??_U@YAPEAX_K@Z
memcpy_s
malloc
wcsncpy_s
free
??2@YAPEAX_K@Z
??_V@YAXPEAX@Z
??3@YAXPEAX@Z
wcsstr
memcpy
ntdll
RtlLookupFunctionEntry
RtlCaptureContext
WinSqmAddToStream
RtlVirtualUnwind
dxva2
GetNumberOfPhysicalMonitorsFromHMONITOR
GetPhysicalMonitorsFromHMONITOR
DestroyPhysicalMonitors
GetMonitorBrightness
SetMonitorBrightness
GetMonitorContrast
SetMonitorContrast
GetVCPFeatureAndVCPFeatureReply
SetVCPFeature
mscms
DccwReleaseDisplayProfileAssociationList
SetColorProfileElementSize
SetColorProfileElement
WcsDisassociateColorProfileFromDevice
WcsSetDefaultColorProfile
UninstallColorProfileW
DccwGetDisplayProfileAssociationList
DccwCreateDisplayProfileAssociationList
DccwGetGamutSize
WcsOpenColorProfileW
WcsGetDefaultColorProfile
WcsGetUsePerUserProfiles
DccwSetDisplayProfileAssociationList
CloseColorProfile
InstallColorProfileW
GetColorProfileFromHandle
WcsCreateIccProfile
WcsSetCalibrationManagementState
WcsGetCalibrationManagementState
GetColorDirectoryW
shell32
ShellExecuteW
gdiplus
GdipCloneImage
GdipCreateBitmapFromStream
GdipFree
GdipCreateLineBrushI
GdipFillRectangleI
GdipAlloc
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusShutdown
GdipDisposeImage
GdiplusStartup
GdipCreateHBITMAPFromBitmap
comctl32
DestroyPropertySheetPage
CreatePropertySheetPageW
ord345
PropertySheetW
ole32
CoTaskMemAlloc
CoCreateInstance
StringFromCLSID
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemRealloc
oleaut32
SysFreeString
VarUI4FromStr
SysAllocString
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 762KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ