Static task
static1
Behavioral task
behavioral1
Sample
837043cdb6081c1e0d6aaff23a826383_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
837043cdb6081c1e0d6aaff23a826383_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
837043cdb6081c1e0d6aaff23a826383_JC.exe
-
Size
1.9MB
-
MD5
837043cdb6081c1e0d6aaff23a826383
-
SHA1
c959abbee8f78fb0cfea52968642e7026d98f0f4
-
SHA256
c053cf70d55c6decf7942fb6ae59ac98d2ac0f34f7dd020d482ad587514ec967
-
SHA512
e4fe38341d29fce2e4f8817bc05e5d83586e7096347ce980738a9187bc0b27dbf0c307f45ef055f37ba351cfe395e21923ceac4e60532f5aea6237c0c548b2e8
-
SSDEEP
24576:Ww9/bmXPWGUgSR/kkeaFN+gAcQn9XXza4UO/DIs1ZkqP5qRtsZ60TZf8G1FMAeCQ:/veSR/krpgaBUOblX7TR8bAbZVrY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 837043cdb6081c1e0d6aaff23a826383_JC.exe
Files
-
837043cdb6081c1e0d6aaff23a826383_JC.exe.exe windows x86
6d0267bc5687cc6eb336591365568c7a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetProcessHeap
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
GetACP
HeapSize
CreateThread
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
lstrcpynA
GetTempPathA
GetPrivateProfileSectionNamesA
EnumResourceTypesA
EnumResourceNamesA
GetExitCodeThread
TerminateThread
ResetEvent
CreateDirectoryA
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
GetDateFormatA
GetTimeFormatA
RtlUnwind
GetTickCount
GetFileSizeEx
SetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
GetTempFileNameA
GetFileTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
DeleteFileA
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GlobalFlags
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetModuleHandleW
InterlockedIncrement
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
CreateEventA
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
GetModuleFileNameA
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetVersionExA
GetLastError
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MultiByteToWideChar
GetFileAttributesA
ExitProcess
Sleep
GetModuleHandleA
GetProcAddress
DeviceIoControl
lstrcmpiA
MulDiv
lstrcpyA
lstrcatA
lstrlenA
FindResourceA
WinExec
LoadLibraryExA
FileTimeToSystemTime
GetLocalTime
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
CreateFileA
WriteFile
CloseHandle
GetSystemTime
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
GetConsoleOutputCP
user32
CheckMenuItem
InflateRect
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetKeyState
SetMenu
GetScrollPos
SetForegroundWindow
PostMessageA
EnableMenuItem
GetClassInfoExA
GetDCEx
LockWindowUpdate
FillRect
RegisterClipboardFormatA
RegisterClassA
AdjustWindowRectEx
DeferWindowPos
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
IntersectRect
GetWindowPlacement
GetMenuStringA
InsertMenuA
GetSubMenu
RegisterWindowMessageA
LoadIconA
GetWindow
RedrawWindow
IsDialogMessageA
SetWindowTextA
MoveWindow
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
GetFocus
SetWindowRgn
ModifyMenuA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
MessageBoxA
PostThreadMessageA
MapVirtualKeyA
GetClientRect
InvalidateRect
EnableWindow
GetSysColor
IsWindow
ShowWindow
CreateWindowExA
TabbedTextOutA
CopyIcon
LoadCursorA
SetCursor
GetCursorPos
ReleaseCapture
CopyRect
PtInRect
SetRect
OffsetRect
EqualRect
LoadBitmapA
GetWindowRect
ScreenToClient
GetDC
UpdateWindow
IsWindowVisible
SetTimer
KillTimer
GetCapture
SetCapture
WindowFromPoint
wsprintfA
GetIconInfo
ReleaseDC
CreateIconIndirect
DestroyIcon
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
GetWindowThreadProcessId
PostQuitMessage
ValidateRect
GetActiveWindow
TranslateMessage
GetMessageA
ShowOwnedPopups
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetDesktopWindow
MapDialogRect
SetWindowContextHelpId
GetMenuItemInfoA
DestroyMenu
GetSysColorBrush
UnregisterClassA
TranslateAcceleratorA
BringWindowToTop
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
DeleteMenu
SetParent
WaitMessage
CharUpperA
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
DestroyCursor
LoadImageA
SetRectEmpty
IsRectEmpty
EnumWindows
GetMenuItemCount
GetMenuItemRect
GetMenuItemID
GetMenuState
GetWindowTextA
GetWindowLongA
GetClassNameA
ClientToScreen
GetParent
ChildWindowFromPoint
IsWindowEnabled
GetClassInfoA
DefWindowProcA
GetMenuDefaultItem
DrawStateA
IsMenu
IsZoomed
CloseDesktop
GetUserObjectInformationA
OpenInputDesktop
ToAsciiEx
GetKeyboardState
GetKeyboardLayoutList
IsClipboardFormatAvailable
CreateIconFromResourceEx
DrawIconEx
GetWindowRgn
ShowCaret
HideCaret
DrawFrameControl
DrawFocusRect
InvertRect
SetCursorPos
SetWindowLongW
GetWindowLongW
IsWindowUnicode
LookupIconIdFromDirectoryEx
GetMenuStringW
GetDoubleClickTime
DrawEdge
GetCursor
SendMessageTimeoutA
GetTabbedTextExtentA
DefFrameProcA
DrawMenuBar
TranslateMDISysAccel
GetSystemMetrics
SendMessageA
SystemParametersInfoA
LoadStringA
UnionRect
gdi32
GetClipBox
ExtTextOutA
CreateRectRgnIndirect
SetRectRgn
GetMapMode
CreatePatternBrush
DPtoLP
SaveDC
RestoreDC
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
GetClipRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
RectVisible
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
PolyBezierTo
CreateRoundRectRgn
GetStockObject
Ellipse
GetCharWidthA
StretchDIBits
GetBkColor
GetTextColor
GetRgnBox
PtVisible
CreateHatchBrush
CreatePolygonRgn
CreateRectRgn
CombineRgn
OffsetRgn
FillRgn
SelectClipRgn
FrameRgn
GetDeviceCaps
SetTextJustification
GetTextExtentPoint32A
TextOutA
CreateFontIndirectA
SetBkMode
SetBkColor
GetTextMetricsA
MoveToEx
LineTo
SetTextColor
CreateSolidBrush
StretchBlt
GetObjectA
CreateCompatibleBitmap
CreateBitmap
CreateFontA
CreateDIBSection
CreateCompatibleDC
SelectObject
SetPixel
GetDIBits
PtInRegion
Polygon
GetCurrentObject
Polyline
EnumFontFamiliesExA
GetBitmapBits
ExtCreateRegion
GetViewportOrgEx
RoundRect
GetWindowOrgEx
GetTextExtentPoint32W
GetTextAlign
ExtTextOutW
StrokePath
FillPath
StrokeAndFillPath
EndPath
CloseFigure
BeginPath
BitBlt
DeleteDC
DeleteObject
ExtSelectClipRgn
CreatePen
PatBlt
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCreateKeyExA
RegQueryValueA
RegOpenKeyExA
QueryServiceStatus
StartServiceA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
RegSetValueExA
CreateServiceA
RegDeleteValueA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegQueryValueExA
shell32
SHGetPathFromIDListA
SHGetMalloc
SHAppBarMessage
DragQueryFileA
DragFinish
ShellExecuteA
SHGetSpecialFolderLocation
comctl32
ImageList_GetIcon
ImageList_GetImageCount
ord17
ImageList_AddMasked
ImageList_Create
_TrackMouseEvent
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy
shlwapi
PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathFindExtensionA
oledlg
ord8
ord1
ole32
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoDisconnectObject
CoTaskMemFree
oleaut32
SysAllocStringLen
VariantChangeTypeEx
VarUdateFromDate
OleLoadPicturePath
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
SafeArrayDestroy
VariantCopy
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadTypeLi
VarDateFromStr
VariantInit
VariantChangeType
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
winmm
PlaySoundA
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ