Static task
static1
Behavioral task
behavioral1
Sample
JC_605a6a8596c34ff6b1869453f1558b0fbd956049065ed97743a725f24ee41fa0.exe
Resource
win7-20230831-en
General
-
Target
JC_605a6a8596c34ff6b1869453f1558b0fbd956049065ed97743a725f24ee41fa0
-
Size
12.0MB
-
MD5
e78d2d8ac1a55bdc1e11715e8a43449f
-
SHA1
a06d502baac88ad35c760305147cd36f5391fd74
-
SHA256
605a6a8596c34ff6b1869453f1558b0fbd956049065ed97743a725f24ee41fa0
-
SHA512
e17c7adf1cf55398832e805db6c403db8147eec5b5ee6a7effa0ccbb979c85b08b7af2a1d4aea0f8208bdd791d21f3373d87248db26a1694d203865e271cd8df
-
SSDEEP
196608:MPBTociyYRYYdZdMDtxzW5ZU14N2r0XXsVpFORwN5MJNChwhqYw5n5TvrGDu2Iax:Mm/yedHMDtUdi+cVpFORwN5MJNC2QZ5i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JC_605a6a8596c34ff6b1869453f1558b0fbd956049065ed97743a725f24ee41fa0
Files
-
JC_605a6a8596c34ff6b1869453f1558b0fbd956049065ed97743a725f24ee41fa0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
evmp1 Size: - Virtual size: 5.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
evmp2 Size: 12.0MB - Virtual size: 12.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE