Static task
static1
Behavioral task
behavioral1
Sample
PO#006543678.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
PO#006543678.exe
Resource
win10v2004-20230831-en
General
-
Target
a473ff3bfe26ba63b3c583fa1780f4e4b041b3815f656bf7425764a61c3224aa_JC.zip
-
Size
668KB
-
MD5
765a7f3426de3365b870cc99538eda74
-
SHA1
d42101278e8e952942b3ecdfe92449d67cf834ce
-
SHA256
a473ff3bfe26ba63b3c583fa1780f4e4b041b3815f656bf7425764a61c3224aa
-
SHA512
462dcb895a5ffe15360fb8ae6889e89589aa7439a7f9195c32b76023a3776478ac6751521054d51a469444cdc1c8618fcf546bc5f906a88cc7fc91a8773a4a12
-
SSDEEP
12288:i/81c2scSSyausdGj0gO/ySZ0HeEoqJF7ExoOw1NhpnJVcUF4AwY:i01c2s97auw/yS6+bqQxo7hXVXFrwY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO#006543678.exe
Files
-
a473ff3bfe26ba63b3c583fa1780f4e4b041b3815f656bf7425764a61c3224aa_JC.zip.zip
-
PO#006543678.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 800KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ