Static task
static1
Behavioral task
behavioral1
Sample
b5169b6fa30cff601e0f3473f0a95006767553560753831f4e7f365758011433.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b5169b6fa30cff601e0f3473f0a95006767553560753831f4e7f365758011433.exe
Resource
win10v2004-20230831-en
General
-
Target
eba9a1b743995e42862e3dea25db1e26_JC.bin
-
Size
578KB
-
MD5
ba1f37dd1577d0e6dbdcde74bb3140c6
-
SHA1
c649f407304866329d9926e93fe0af4ec93d3f9e
-
SHA256
509d65ebefab7530d2f5b3edc4a232390b081f93c8b0c431d6ffb19016be3185
-
SHA512
02bee95c502a0b61b80de91c5002347f1b511b141a086480aebac4c1e53b111c5666a227f7002fa33a5de50f60c9ef79df8f259a19e7189724d45be0bd0c9872
-
SSDEEP
12288:WY2p6/qwh0xGbUVuCBzN1/qqjdgdUTMh9fc1Dzs+1j0YflkmlfEDdH:D2pdwGEUu+zz/nyYJ1DzsKhlfeH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b5169b6fa30cff601e0f3473f0a95006767553560753831f4e7f365758011433.exe
Files
-
eba9a1b743995e42862e3dea25db1e26_JC.bin.zip
Password: infected
-
b5169b6fa30cff601e0f3473f0a95006767553560753831f4e7f365758011433.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 673KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ