Static task
static1
Behavioral task
behavioral1
Sample
069a31da419cd906e873313ebbfa7dc7_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
069a31da419cd906e873313ebbfa7dc7_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
069a31da419cd906e873313ebbfa7dc7_JC.exe
-
Size
86KB
-
MD5
069a31da419cd906e873313ebbfa7dc7
-
SHA1
3b05e950ac1098bcbcf63fb29cfa7b61f00c52d3
-
SHA256
c88ab940792526dc3bcd18f8fc284fbea7a239e736af1b7ea55df3d91e47dc2b
-
SHA512
64b80e895f15587a02070a72f5e9e3b088d498f978f50b9c9d0091a26c1891fc8840d9da368d9ac048ebcc0df395d4b63a8b3c8f11c57f4a3f274455d399f681
-
SSDEEP
1536:nBYi34ZZilwEwdVsyAcUJy8PegOvj2CnE2fTYU0t0l5snR+7WGDFBj3P7fzIV7i:nBhMW3/PGgOvj28lx0t+Ss7WGDrPfzI8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 069a31da419cd906e873313ebbfa7dc7_JC.exe
Files
-
069a31da419cd906e873313ebbfa7dc7_JC.exe.exe windows x86
afff32a8ea544865fae4f01b9d6fa2fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualBufferExceptionHandler
WaitForSingleObjectEx
GetModuleHandleExW
GetVersionExA
WaitForSingleObjectEx
RtlMoveMemory
FindFirstChangeNotificationW
DeleteFileW
RestoreLastError
ReadConsoleA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ice Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE