Static task
static1
Behavioral task
behavioral1
Sample
71bb7c0c0021457f044bf0c2daac94a02a3735b496c1f71f4e6cc4116edb4de3_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
71bb7c0c0021457f044bf0c2daac94a02a3735b496c1f71f4e6cc4116edb4de3_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
71bb7c0c0021457f044bf0c2daac94a02a3735b496c1f71f4e6cc4116edb4de3_JC.exe
-
Size
580KB
-
MD5
651b195d23ae451834720e50a634897a
-
SHA1
53e6cc5d8c565ae6b984787b808c278ef5bf6386
-
SHA256
71bb7c0c0021457f044bf0c2daac94a02a3735b496c1f71f4e6cc4116edb4de3
-
SHA512
4ca3df6de4d0c2deadc0b66770672158511613c7f08e172ebaf1a0791e4a4f9e6f06a0c6d6ceff8cd5a61cd688838c94702c26cd9607e9a2be6a9796b9e90b2c
-
SSDEEP
6144:F9Z61t9Nm6lf7lDuxics5X5e+3JVEu8LlF1OYsm+exFDIVmxPm:ryDNBlf7kxics5pe+Au8psm+exFUV6
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71bb7c0c0021457f044bf0c2daac94a02a3735b496c1f71f4e6cc4116edb4de3_JC.exe
Files
-
71bb7c0c0021457f044bf0c2daac94a02a3735b496c1f71f4e6cc4116edb4de3_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ