Static task
static1
Behavioral task
behavioral1
Sample
3dbe97629eeac284500a8a8ec0066730_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3dbe97629eeac284500a8a8ec0066730_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
3dbe97629eeac284500a8a8ec0066730_JC.exe
-
Size
442KB
-
MD5
3dbe97629eeac284500a8a8ec0066730
-
SHA1
d09d98de02cb00224c00ff4ee9112cf5c085a680
-
SHA256
8057e3f8f42b3cff51dd19dd0b178d6880aacb4cb249613f2474ad3870acc839
-
SHA512
23db3888467e2e930dfdca80205736f878faf52f04a0cb76a88b8f9c66485f6dc32eb46c831b6623f5bc21050326b7dac34040432e949e914cb5ad24609424b1
-
SSDEEP
6144:bpXuEr6LdsimJ8k5TC04SxdVQegWJviFJ4b5bXBJ0vfVz27ifbZbBGM1j1ma0+m4:bpXu7oJ8mTZ41enJWGdBJ0vN4ifWMJ0I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dbe97629eeac284500a8a8ec0066730_JC.exe
Files
-
3dbe97629eeac284500a8a8ec0066730_JC.exe.exe windows x86
824a8c477dcef7cf26ba83682fc27732
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AllocateUserPhysicalPages
GetConsoleWindow
GetThreadLocale
GetStringTypeW
shell32
SHCreateShellFolderView
ntdll
ZwReplyPort
user32
GetClipboardViewer
Sections
.text Size: 435KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 187B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE