Static task
static1
Behavioral task
behavioral1
Sample
c89c718f867910692354a6559f2fc527f55f5dec0ab50b7b9001808288b70f80_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c89c718f867910692354a6559f2fc527f55f5dec0ab50b7b9001808288b70f80_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
c89c718f867910692354a6559f2fc527f55f5dec0ab50b7b9001808288b70f80_JC.exe
-
Size
353KB
-
MD5
c7760450b006ef172e0638bde6125c17
-
SHA1
dc6b9de31d116ee71994b1bbe2a22be276cae720
-
SHA256
c89c718f867910692354a6559f2fc527f55f5dec0ab50b7b9001808288b70f80
-
SHA512
65d6e71f26871d088bac66374fcd2fc977b032f7c8c2874e08cd80b8e2e5314cba0f06c9e1a0c624e150713f0f0c9e5e2b1eaec0f6c4ddd058379f0a50394023
-
SSDEEP
6144:xKhvSrEBZrGt9sPg5/LNRoNGS3ovnCbWsH2/of1uL8vwP26kiI:xKhvSrEBpUmGS3EnCbWsH2/of1uL8vcu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c89c718f867910692354a6559f2fc527f55f5dec0ab50b7b9001808288b70f80_JC.exe
Files
-
c89c718f867910692354a6559f2fc527f55f5dec0ab50b7b9001808288b70f80_JC.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Z$9O}` Size: 209KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ