Static task
static1
Behavioral task
behavioral1
Sample
4e02a35401fa4ad7dd17364e8edce8e8460d7427d16c153831c99369b04a895f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4e02a35401fa4ad7dd17364e8edce8e8460d7427d16c153831c99369b04a895f.exe
Resource
win10v2004-20230831-en
General
-
Target
d7f5158362bf3bd78f6acf75a460b7ae_JC.bin
-
Size
790KB
-
MD5
059031525d8b5e40bd7ee298c0d6d2b0
-
SHA1
2afded4180e6c69005fa92a131a5e03c196adeb0
-
SHA256
860b366dee381409a6c49dace4c556de49cc61a55a872e1bcab0423631068e48
-
SHA512
62fd3f36b62955e00ac13707eefff2018cc82864ea7156eec16d884b3c0809ad75f4c2f31cb7bb13e5ad1f3637a484b03e9a644d44a8bec820a0907b0a958aea
-
SSDEEP
24576:Oajw0L9PS7OSBfS7ekVpVErzj+Jgx5fs0r9Qj6q:Oav9Psq7ekVSzx5frxQj6q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4e02a35401fa4ad7dd17364e8edce8e8460d7427d16c153831c99369b04a895f.exe
Files
-
d7f5158362bf3bd78f6acf75a460b7ae_JC.bin.zip
Password: infected
-
4e02a35401fa4ad7dd17364e8edce8e8460d7427d16c153831c99369b04a895f.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ